last executing test programs: 4m37.910112601s ago: executing program 0 (id=509): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x18, 0xa, 0x1, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00", 0x59455247}) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)={[{@nr_blocks={'nr_blocks', 0x3d, [0x38]}}]}) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001400)=ANY=[@ANYRESOCT]) 4m37.841907831s ago: executing program 0 (id=510): socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0xc000}}], 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd2b, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xffffffffffffffd6, 0x2, [@TCA_FW_POLICE={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x893}, 0x2404c084) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r8, 0xfffffffffffffe9c) 4m37.592058563s ago: executing program 0 (id=511): r0 = socket$nl_route(0x10, 0x3, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) (rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xfffffffffffffffe, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3001008817b0b200b90c7c2ab1423b9e79f9dba028819bd9eb100000000607000000e47aedb3afd4df911e4eef16f80b0b1fccb185774b7f00807beb27e1b06cf1cf045d00000000681fdef213b928502583e18b823b2c37fce851da36a7e4538c362c97a5da5aac0700000000000000511e55e7334208ed6eb7b679632973a62fe220daacc3cb821b428549895d45f63f3f3f2ee9bd76298610c644a1e3115aa9de47e7ef43999af065d0e5e23155a4b131000ca106394a35225acdf0c2cf14fba9632b4561a17a0000000000", @ANYRES32=r5, @ANYBLOB="4000a6000a000200ffffffffffff000027ff050001000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m37.421988666s ago: executing program 0 (id=512): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) socket(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c001000000fae0090f000000000000a2bc5603ca0000327f89000000200000004a2c71083e09001778581acb6c0101ff0000000309", 0x48}], 0x1) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b1a, &(0x7f0000000040)) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00Z\x00\n']) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 4m37.421681334s ago: executing program 0 (id=513): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001000000800000005ba2af242e2e8eac37cebf4ea9c424a511908637d20bc4c10b5c0b8ceb64d03a6ab789ac6aa71ebb3c09f9d7bcb2b45749a128d69a24550c6693670a168841939a24ec93656ff87ba3706db985", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000000), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000380)={r5, 0x0, 0x30000, 0x0, 0x0, [0x0], [0x9, 0x0, 0x6, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x100000001, 0x2, 0x8]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r6}) socket(0xa, 0x5, 0x0) (async) socket(0xa, 0x5, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r8 = dup(r7) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r11 = dup3(r10, r9, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) write$FUSE_BMAP(r8, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) (async) mkdir(&(0x7f0000000040)='./bus\x00', 0x10b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') 4m37.149273467s ago: executing program 0 (id=520): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$sock(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)="83", 0x1}, {&(0x7f0000000180)="86f79f88fff54497", 0x8}], 0x2}}], 0x1, 0x4080044) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x0, &(0x7f0000000400)) mount$9p_virtio(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a3000000000050005000200000014000780050015000200000008001240000a0000050004000000000012000300686173683a6e6574"], 0x60}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0}, 0x40880) r5 = socket(0x1e, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}]}, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r8, @ANYBLOB="000014000a0001000180c2000000000008000f0004"], 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r10, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x1a}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000080}, 0x8040) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000400000000000400050000000000100004000000000020"], 0x24, 0x2) 4m37.050591235s ago: executing program 32 (id=520): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$sock(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)="83", 0x1}, {&(0x7f0000000180)="86f79f88fff54497", 0x8}], 0x2}}], 0x1, 0x4080044) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x0, &(0x7f0000000400)) mount$9p_virtio(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a3000000000050005000200000014000780050015000200000008001240000a0000050004000000000012000300686173683a6e6574"], 0x60}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0}, 0x40880) r5 = socket(0x1e, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}]}, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r8, @ANYBLOB="000014000a0001000180c2000000000008000f0004"], 0x30}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r10, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x1a}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000080}, 0x8040) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000400000000000400050000000000100004000000000020"], 0x24, 0x2) 4.989345402s ago: executing program 4 (id=3184): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r0}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x125101, 0x10) mknodat$loop(r3, &(0x7f0000000200)='./file0\x00', 0xc000, 0x1) ioctl(r3, 0xf, &(0x7f0000000240)="057c2e906079bffea48016a0533381556b322e430aaa14d0bcf2a5f10cbd52b24e79cd7c9f63737424e6a2e093d365f5a3562034b84d56f7ed6ba7d76708d0da06b3d38bda096632c1d6e7004723646f77011b05a52402e888f62e0d15a7aebc3982d9783d1c071758c50e3a23047b594d6e476f628a37895559d9a54ac49556996d7da4cc268e0e64bf45d2f46b1a057a2701c5eebf2b508536f21fa15f3c854519865feefd218c60495f61b9fc") mkdirat(r3, &(0x7f0000000300)='./file0\x00', 0x18) unlinkat(r3, &(0x7f0000000340)='./file0\x00', 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000380)="80692e39a82f90", 0x7, 0x24041040, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) chown(&(0x7f0000000440)='./file0\x00', r0, r2) setfsuid(r0) mkdir(&(0x7f0000000480)='./file0\x00', 0xa4) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) write$FUSE_INIT(r6, &(0x7f0000000540)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x2b, 0x3ff, 0x1000008, 0x7, 0x6, 0x1, 0x9, 0x0, 0x0, 0x2, 0x800}}, 0x50) creat(0xffffffffffffffff, 0x20) mount$overlay(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2104002, &(0x7f0000000640)={[{@volatile}, {@redirect_dir_nofollow}, {@uuid_auto}, {@index_on}], [{@dont_measure}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x37, 0x62, 0x30, 0x34, 0x64, 0x39, 0x39], 0x2d, [0x38, 0x39, 0x31, 0x37], 0x2d, [0x38, 0x31, 0x36, 0x34], 0x2d, [0x64, 0x62, 0x65, 0x37], 0x2d, [0x32, 0x32, 0x35, 0x31, 0x32, 0x32, 0x32, 0x30]}}}, {@uid_gt={'uid>', r0}}]}) r8 = creat(&(0x7f0000000700)='./file0\x00', 0x100) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) mount_setattr(r3, &(0x7f0000000740)='./file0\x00', 0xf9d5fbf6708865e2, &(0x7f0000000780)={0x8, 0x1, 0x140000}, 0x20) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f00000007c0)={0x10001, 0x1, 'client0\x00', 0x2, "285f0fe9b5d8e018", "efdebabe4390fbd75209c6ddd53e93807fe23e3e8b6f15770380f1c56fb0dfc5", 0x7, 0x7}) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000401, r0, &(0x7f0000000880)) faccessat2(r3, &(0x7f00000008c0)='./file0\x00', 0x67, 0x100) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mount$cgroup2(0x0, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980), 0x90400, &(0x7f00000009c0)={[{@subsystem='rlimit'}, {@memory_localevents}, {@favordynmods}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) setxattr$security_capability(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40), &(0x7f0000000a80)=@v3={0x3000000, [{0xfffffffb, 0x6}, {0x10, 0xc}], r0}, 0x18, 0x2) link(&(0x7f0000000ac0)='.\x00', &(0x7f0000000b00)='./file0\x00') getdents64(r8, &(0x7f0000000b40)=""/230, 0xe6) pwrite64(r7, &(0x7f0000000c40)="9cbd7a8a7787040acf20621dd685e65a9b12b89f469d08ec8d7d9b93a13f9d0220da11b4897ed55202aeb4df31660d7b41a4a9f444b164c866e697a1d88d5525b94bc3cd75af7ae5b9905d8ce132864c928111cadac1be1729301ce2654ccc90e954f0d303d48b0f8ecbf90c040f9b3a370503f425e827ce97650cbea76dc4aa9bdc435e898ec0ad6a9639366e196db60511978e8953d0425155e36ad629ee98c128c8e5fc1eabbeb489f9f372f5140d9b5f91c9a842eb7cea4a8799aac7cdb6ec3f8ab55eef4cc615d85bdceb20618d00943cccf0", 0xd5, 0x4) setxattr$security_capability(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80), &(0x7f0000000dc0)=@v3={0x3000000, [{0xfffffffe, 0x1}, {0x4, 0x6}], r1}, 0x18, 0x0) 4.986687317s ago: executing program 4 (id=3186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x9, 0xa, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x1, 0x8, 0x7, 0x82, 0x10, 0x0, "bc8feb13"}, 0x8, 0x2, {&(0x7f0000000440)=[{0x9001, 0x7fffffff, {0x0}, 0x1000}, {0x5, 0xdf9, {0x0}, 0xd90b}]}, 0x6}) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000070076586dd41efc4b18dbf86e9e3cdfa0000a44000000060a0b0400000000000000000200000018000480140001800a0001007175657565000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000004000000000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x20001b, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x28}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000ad1811ff00000000000008000000000000000000ff0200000000000000000000000000014f194e20"], 0x52) ioctl$KVM_SET_NESTED_STATE(r5, 0x4048aecb, &(0x7f0000001440)={{0x5, 0x0, 0x80, {0xffffffffffffffff, 0x1}}, "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", "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"}) 4.598886216s ago: executing program 4 (id=3190): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x29, 0x3, 0x37) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2920a482b46af99d, 0x0) r3 = memfd_create(&(0x7f0000000200)='limit\x00', 0x4) add_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="b1d06e9ef68a7dbaa3b61beb77f9418b30e64a57181d8e03b416633a27afd0f8a9b7045f94022c472138db687ae308a544793e82203beccbad74c6f1845136c08b", 0x41, 0xfffffffffffffffd) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x80, 0x6d5, 0x5, 0x20118, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x5, 0x5}, 0x50) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000240)={'streebog512-generic\x00'}}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000240)={r3, 0x0, 0x0, 0x10000}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04050400c900"], 0x7) 4.068703235s ago: executing program 2 (id=3194): r0 = syz_usb_connect$uac1(0x6, 0xd8, &(0x7f0000000000)={{0x12, 0x1, 0x648, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x23, 0xb0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x304, 0x3, 0x3, 0x8}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x4, 0x2, "fcd0f8dbd7fd"}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x8, 0x8, "f9a656ec39"}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x7, "d482fa43"}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x1, 0x1, [0x9]}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x40, 0xb, "01526033a1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3ff, 0x5, 0x1, '*~n'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf5, 0x1, 0x0, 0x0, "428120", "ae"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0xfa, 0x3, {0x7, 0x25, 0x1, 0x1, 0xa, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x2c73, 0x7, "488918945af5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x18, 0x3, 0xa, 0x1, {0x7, 0x25, 0x1, 0x83, 0x7}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x7b, 0x6, 0x9, 0xff, 0xa}, 0x10, &(0x7f0000000140)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x8, 0x9, 0x0, 0x9}]}, 0xa, [{0x59, &(0x7f0000000180)=@string={0x59, 0x3, "8ce0f354574af7699bb8b65272d80263a926965b950f8ac575e39b7f0fdf44953ec72d2628d143b07cd4fe9ee89447e9b5b46f975e8020c9c872467434a24ddb3b36932357a60d83890cc1f0c3fe4063cd76f62dffc92d"}}, {0x56, &(0x7f0000000200)=@string={0x56, 0x3, "fde7263f528679b9832bd0629cc058470a2900315d6287b6c81a6131302745ef354ccac51cecf637e899f07f45687cd1944a0fd1e0e34b74367fec9e2a6674bdc18d3180f2beac73139c924e8dce48fbf2da1fd0"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x500a}}, {0x2d, &(0x7f00000002c0)=@string={0x2d, 0x3, "fda9357f803ec082bf60a2b7db5e96ee214e50e347e02e54ced08d025b71381ea93c74fe2b2fbb10e592a9"}}, {0x66, &(0x7f0000000300)=@string={0x66, 0x3, "8dda50450e4d3503e844f35a3b649da836fc2c146927b871c1b23de9340d910faaede92e42ce5eea305e2df0ad4efea0e4a3d776b49d5ef379b1416b709d94f25e476f26be05193d581d27407d0c0c31feacb21db85091dcff70a1bbf8f962644be729d8"}}, {0xed, &(0x7f0000000380)=@string={0xed, 0x3, "85b5c4295ace8115bd2a660dc59dc551a1966e9f49a7383514ae84b23e18313ff3ebebf66472b14215614a75c696a2101788e1f6770acbd785ab4061acc183e26d61fa57c85e79a255c411e751b2fd51520042a812e518f9030dc15482bb23f23498f7b1309252739890d35bfb74272151cc0b57705a07ae36c3b245e7e54af53862a35aee4607a7abdc442083a089e828b810e3d68b7306921355e5c26159dea258e35075d2598f94cf74089e4b44c4b261ce17fe167ca733f62a0bb967a0189f8edd69c18a71ef2e3ebd83281aa0d5ce461fa0a0ad5c0ee09c85add6d3d4913543c02b29567115bbcf1c"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x414}}, {0x3c, &(0x7f0000000500)=@string={0x3c, 0x3, "3866373edcc8de0757597e4129435a1df74098f362718dbce6cd65a81981a5c6ebb175e0b97f9e9f29fac72dc9345832fdaaf74903c11d5dc77e"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x406}}]}) syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0x14, &(0x7f0000000640)={0x40, 0xf, 0x24, {0x24, 0x6, "a0f7f1b4954f0e5f1ea4f51dae6f6cfc2b628602ab50f3611fc8f76fa7db12d6f540"}}, &(0x7f0000000680)={0x0, 0x3, 0x4c, @string={0x4c, 0x3, "7579ae527bdd00f5ef34f0d7de85fba68584d983d471d28b37d67bb2e791b1aa66e12e998cf3dfc54c0f27aed86a927169cc742d4662c2299e6c07d11672f4e24b9d4eccf6ec0720e65d"}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000740)={0x20, 0x8, 0x98, "84e2a4dc2ca98cf82823d7003194451f205f107c8ea0cb0849f5a39fd421fc12e67ab81d1084d9058ee576c8ec80898753ffef0c152b5e6fc2f62776777ba867d17d34934ba803814fc80996677537d46ac8e529c73630cf78ed45fa5556677f45aa8e88eb9456dd9119da3c329e67c84b90451a1d0808db5bb5e5a5fb951e2c67b50e70071839ef38ddfc6886f071b75c767cc9cfcdfa10"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000000880)={0x20, 0x81, 0x3, "f78d68"}, &(0x7f00000008c0)={0x20, 0x82, 0x3, "26857a"}, &(0x7f0000000900)={0x20, 0x83, 0x3, "e8ed60"}, &(0x7f0000000940)={0x20, 0x84, 0x3, "8e430a"}, &(0x7f0000000980)={0x20, 0x85, 0x3, 't\'\f'}}) syz_usb_control_io(r0, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x20, 0x3b, 0x7d, {0x7d, 0x5, "0e1c3f2b7bbb2dab2e5b53d296e616e49500fc883f7bb8773137c5db0bdf6d360fd24944818ebaa65721148ed6ed60857b5a1fdb4cc7cc3c559d114154f172adb482aaad6f19788e0e02d3e633e4303d5a186252e216e8cf6415b376a2347558f58e7691250f04745e9f050fa49aee57e7002900a8c39806a2adef"}}, &(0x7f0000000b00)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "649bf604c38e26461436c1672b6fc75c9a685cf4d9de0660622b57c717bedfd224e9c5be6564ceec4c4dd0f64046915b3d91c94b8fae9d0f702c405ab6f75df9bdfb4ff5b31b369e074beeea3f9a9c5c25579c9a49debc1dcf7db4f0353566a87977c3eca5f001f4b067c3fa52b4d28906dd24f30ad24a08d4cb73aeb774b2bcbdfa34d1576aad7d9723ba507fc9038d627ec31a3d52b16d41ee98fccc0b60c43611ddfd7e2eafa94e0fbcc182906346bae4"}}, &(0x7f0000000bc0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x10, 0x14, 0x6, "08a4b3be", "fae46cd6"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xdd, 0x80, 0xf0, 0x5, 0x6, 0x1, 0x2}}}, &(0x7f0000001180)={0x84, &(0x7f0000000cc0)={0x0, 0x8, 0xf5, "15944379f89ac648e608869708ea3e464457990fc7f610e690491bf1e348d9cd13758e8ac78a0de556499f912d8fe2986138f4515245085028c3b3c99eb55794c6d6a65d10d2a33c584f1363cf3b5daabe8a9ca2cc7b5874d98fc3bf65e5da23d63ad886904bea1a0ca40f96f0545afe72fbc8a1b2322fb03a10f74fdc50814e13d8a1c6833e4b89948a0de7645680913fece2c32bf214c191f5a395a42b63d72b6014c605e4ba6cc569ed006c40887f2e0fed84e4cd3f9fc816b6c381c6e19c7b14b8e7c85a5106ab1581f3bb80bdaaf803ebba70897829cc021a26602804bab4dbb3f60baedf63178006d943e52b40a5fd5fa604"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000e40)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000e80)={0x20, 0x0, 0x8, {0x1, 0x66, [0x0]}}, &(0x7f0000000ec0)={0x40, 0x7, 0x2}, &(0x7f0000000f00)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000f40)={0x40, 0xb, 0x2, "dae4"}, &(0x7f0000000f80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000fc0)={0x40, 0x13, 0x6, @random="f5ec34603728"}, &(0x7f0000001000)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f0000001040)={0x40, 0x19, 0x2, "d7a1"}, &(0x7f0000001080)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000010c0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000001100)={0x40, 0x1e, 0x1, 0x6e}, &(0x7f0000001140)={0x40, 0x21, 0x1, 0xe7}}) r1 = syz_usb_connect(0x3, 0xa65, &(0x7f0000001240)={{0x12, 0x1, 0x1d05afbf936e2162, 0x13, 0x7c, 0xc2, 0x8, 0x12d1, 0xff26, 0xccd3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa53, 0x3, 0x9, 0x6, 0x40, 0x3, [{{0x9, 0x4, 0x60, 0x9, 0x1, 0xff, 0x2, 0x16, 0x0, [@generic={0xe8, 0x21, "fc3b4b62e63d2ddaa55d417c2f96d3e7d6999fc8a5a53baacd5410ea704787669e3d0c0ec3a54a534a252d3a411cbd3c393a8d058b4ac63563b2d971fba374afc3170ea399295e03577295d58fb5ba202895b346fe2c0797f3424908064ab57ad03fb9286cf497a6f82ae7e12f57ba4b398ca6f34ff74d1f0a15a7e22c79bcf248c12da65891ad15e19d6ef542fc219a973934ef96b9ed1548bef174f7ff2b3b3cbd5d24e8b36d35d47a3663f27aedbe92f5fd00df288b4e0165a4a5fc580413fade23d3fe2a32cfff7210ffb0148c592aab338006df87975ddeec837f40101e05ea49ec4ea2"}], [{{0x9, 0x5, 0x7, 0x4, 0x200, 0x7f, 0x9, 0x4, [@generic={0x93, 0x30, "7e2fa550e6555807f6d31d2e005bb478f83885190549dad99df517fa4fa324c2120e0ba4eac6a199d18dafaacbb66d2724dfe82f4efb1efb2fdf6a61c78905d2106979947e84d40d8629ca43e0f1c4e47d3a9eed68347c5cb4f0885dd4dec51cbe317ed42145653dede75327b5d4dfe51b122bd5b1b672f66a1dad470ed05cbedf70c7a1272445275e6af1fb0dde14f2a1"}, @generic={0x94, 0xc, "dc77fa1a6cfd76ac952d26d50b4a6e9009ff44c1bf60169900bba79f6afa69925b92706431f9ec27d747bf212d637caa9906c8301a4127d919b95529110e65c6103fd5f035e384bd44060a3a4b81143a5507da459355292d5cccdfe9f759e7da711a079f9ce940f539fbe48c1148aaed62413a0ff32cc14e1eccf37ba3944e71c4cf715148a77444b8197edd9038a6b2dfd3"}]}}]}}, {{0x9, 0x4, 0x5a, 0xfd, 0x9, 0xe4, 0x52, 0xd6, 0x1, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "ea4ff803"}, {0x5, 0x24, 0x0, 0xad}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x8, 0x8b}, [@country_functional={0xa, 0x24, 0x7, 0xff, 0x6, [0x200, 0x5064]}, @mdlm_detail={0x95, 0x24, 0x13, 0x5, "4b6562b642bdbc9f815f2180cbff328f34deb0cbbe6e8561c26390e26dc9acc1cbba9dde7ba9baa9cfb9442273472c26656ddffd773f0537022a2ca3eeb8d0e439484e93baf1b6b166a817475d73a81a2009edc885f529c07aa437255c3e4973b1f38919a7c753db59fec6642de3aff881c4685e3334826f298211a885d017ecefc2dde9d7817328737fac459842450933"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x3}, @acm={0x4, 0x24, 0x2, 0xb}]}], [{{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xd, 0x6, 0x8, [@generic={0x24, 0x20, "dd8c664c0a38e861e5588fd08439d519933d7e1681670a7716af590d809282621bae"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x410, 0x5, 0x0, 0x0, [@generic={0x4a, 0x6, "4baf33ee193b30994307a498093e3278abfb87b2453b6527595eb7ff0b8809cafcb9eafec189240e63f9757974063de470bb472e32efe4601abb87824b18fee06e5d497006ccb9a3"}, @generic={0x87, 0x2, "dc1e56cfb3ccc43e82b4eb4171be1fd0d2938e2cd75269dc0698d7b1a632c01a8dc855076bdcba0ce48592ce8d377d5a07fd72893561708415de12e44258852c8b6df74f49de192f44061c9c17c77424cde5c7a3961c9ed83f25b2bb44c38abe2190c64e30d1aef0f2bf9f6bc0c952cdaa7fe1f09f865925b5c9e0182bae1ad1adbc5ca7ba"}]}}, {{0x9, 0x5, 0x0, 0xd, 0x10, 0x3, 0x4, 0xff, [@generic={0x40, 0x31, "cf610493cd9713a667782aff75b07f4f14833d64c83bd38f57207563e717e2574967dbb8bc50c3a659d2b3a715072a6116611ca1407e46c390c31af64474"}, @generic={0x34, 0x7, "7545227e4c6aef15c5c0ac28fb27ecaf866372831b96de0b0800df49fe5346f2d2fc40ace08e2f298f040a1ae221e7c9091a"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x1, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x2}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x1, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xffff}, @generic={0x23, 0x10, "fb216b1bd13ac46fd3a85196c8b2c6571c6c3d7b2f7d6b3638fc64d58f44bdcd2b"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x80, 0x2, 0x0, [@generic={0x86, 0x1, "ac414920dde5f0cbb1f1ea323ac5ebc5d2a132da19106fdf1715621d49c96a161c24d41083b3fb66fc438eab1a2c5bf7abec1639f38cbef419a3ab0bd76c14b82824254cfe4b9681c5e80d71c120360f0a07d129acee4f556b8d58eb9f7f22527e6852eb9ee59c041f892348bbe33e4407888441b8b0f4a2bc9a04e4f4955e2370782a14"}, @generic={0xa6, 0x4, "b092efe67598e68d5c1ff788abdc3f0a97724059486a0e653fbfeb8601cd05a0c48fef4b8f29a7a8cdc54916f40a5a4cce1781759a046807c202562a4a513dcac12d840f3f681ae9955c46380c0bc4d555323517502812f060f1792ad2bfb32c973dd42b5182ff43bad8c62aef7911c248a861b3408130da7aa0f02c0b0627939178830d6bc6168311ad47f45f7f88fed8a23e15c54852b2292e94ac44e05136aca1e9e0"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x400, 0xb, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x90, 0x4}]}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0xc, 0x81, 0x8, [@generic={0x4a, 0x1, "efda2e126590650894371bab9ea164667e681a7e14dcd8f4567585e5d0599016e2ed0fc2dd854b662a1d560611b1118508e1550bc86f22e9121ad6536eee8b719bb4feef51a9f5eb"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x10, 0xb, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x4}, @generic={0x5a, 0x5, "862158bd8510a0de9b119827d76257004c2b5e018ec84a68c9b431dbae06690eda3b799ad8966ff7599951b320a3b895068ae8604e6e4888d10435a2517c4ce3cb00845e0fd6f781bab178e90c3e5f9341dc70f78d764408"}]}}]}}, {{0x9, 0x4, 0x7f, 0x5a, 0x9, 0xbb, 0x46, 0x24, 0x61, [@generic={0x80, 0x612fd1e04939a58b, "291f62bd6df70de7e42bdde71296219ff33c0be970a6a003b7e47a6faf3b7a12f06c3367cc9151855cf4fa73012629cb4625b370ca1054cebe860b6cc7787379c8034d23452ffb7ef22e4b00cd074a68625e8f95f3ca36fd8312a6cc53177e713d47cc99032b09f8fb02f354c3a67e24fa4a27a4dcc651db342ac955b2b6"}, @uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x1, 0x3, "201e43c2"}]}], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x1, 0xf1, 0x32, [@generic={0x1d, 0x2, "8b8a3888e9212c5905e0b8e18dc0580ce7a308460eb3c07e466599"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x4, 0x0, 0xd, [@generic={0x70, 0x9, "775eff643c067c0eb11621289299a3239e74d5c428be04e57139640a20ae92fcff2a0bb08fdd4d3e9c607fa2aa419edaccc5e4a9eb88f0a784f6b90bc74ec020d006b4696b193bde494b168a76b7b060c17d30ac2b194a95c8f61202db87359542aa388d01d347b609da524fc380"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x0, 0x8, 0x0, [@generic={0xb3, 0x23, "f17869131b542a17bc2436e50a2272223836db12fce98d65acfc59d8f4ef10b13261fb12e75a8e59c126ad646aced9feabced0a47eb77ddf17e8a0cffcf25b9fd1f8282ce77286ac04f57e1174ccde39de4b1370481c5eee3083a4abcfefca08c5d96812f946ed8e01d49e030e00ae314fc608ed3f2f1e7983e6cc41c13109920ecef6bdd557302e55cfb72f1c8103710cbc5e962df3a736ed8648d62132f10cd6228d6b4056374adbc013e487b2966843"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x7f, 0xaa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x8, 0x1, 0x6, [@generic={0xb3, 0x1, "439ab865ec6f335f25a3b5e17c2a6e961fc08813dd3c5af714daae51ff404ba7af9273b6c5fca904ce470d3095aa6096aec5cdf11bd5529fd1b2c880c593fa90d1847f0b339b3c348f8bdf482d312426ccf6b0904fd8d172f75c1bdf2791b0ae8ea27998567456aac40025cf7dbc85f26b25bd94cb96b718ea2f5d11e6365c77882969a77a53ca1257ab3a0ccf1133dfe2a3e629964d0a3b32f7f5b4e792a3b4902a3812076795ead001f9ec4aafc51324"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x3ff, 0x6, 0xd, 0x2, [@generic={0x4e, 0xe, "24ea18e5e7fea6de0a80ad7899dc0053d489cb4e8a4d71e5e054106a05cb4229cfaf00e4a43439a57c6d67af351811a6d72f4a0a21e214ced9dc639e797007a7dbac8f33cbeeef16e71f2806"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xc, 0x9, 0x3, [@generic={0x4a, 0xb, "f3fcc984a5fb7905b344a7b8420fae391d1df18b4586091915dda7e3f14beab8cd86b6dd05d4f61b7d68a124672718d56141df3cb81d8c82e5c7c58e8df3c29e8b70dc61076548d0"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x80, 0xf1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x9, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x1}]}}]}}]}}]}}, &(0x7f0000001dc0)={0xa, &(0x7f0000001cc0)={0xa, 0x6, 0x110, 0x0, 0xfc, 0x5, 0x40, 0x4}, 0x19, &(0x7f0000001d00)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xcf, 0x2, 0x3, 0xf000, 0x4, [0x30, 0x0]}]}, 0x2, [{0x4, &(0x7f0000001d40)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000001d80)=@lang_id={0x4, 0x3, 0x410}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000001f00)={0x14, &(0x7f0000001e00)={0x0, 0x7, 0xa3, {0xa3, 0x2, "6ed3dcd3fe6db6b31d29d99ef0851f4b42ff927cd8b61d517ba5aef11e6620112ce71c6f7275e719b43b48b3b8e163df92945153f1a1f501f51a55c47196e32fc1549e0dfdc69bb49a8af97f3dfb84d47157609dffad88393424542ed7b2fc2eba19d53fbff838580a5dac02c2518e510412efc95fbdb75ea5b0cd5302a41869146c8c03494167253322fc78a3b7b776da3712657f57577bad5caf9186792b4c50"}}, &(0x7f0000001ec0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002180)={0x44, &(0x7f0000001f40)={0x20, 0x14, 0x67, "aa8cc40de7789a777b1bae830af4eda4a79d5cab70438bf79a1ca00d3b38f15e89f4517c3f7626d8e33fe92823abf3a7f47e9974f3f98a3ddf3ee879f45bbbc1ab7c0c28190388a74af45c5bd7ae15dcc67388040492ff086e4663957ccf480d987d16af886331"}, &(0x7f0000001fc0)={0x0, 0xa, 0x1, 0xc2}, &(0x7f0000002000)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000002040)={0x20, 0x80, 0x1c, {0x83d6, 0x2, 0xe2e, 0x7ff, 0xffff, 0x80, 0x0, 0x0, 0x5, 0x7}}, &(0x7f0000002080)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000020c0)={0x20, 0x83, 0x2}, &(0x7f0000002100)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000002140)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$hid(r1, &(0x7f0000002300)={0x24, &(0x7f0000002200)={0x40, 0xe, 0x11, {0x11, 0x21, "a7b6167a5c57985d09dded2d629a0b"}}, &(0x7f0000002240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x103a}}, &(0x7f0000002280)={0x0, 0x22, 0xf, {[@main=@item_012={0x2, 0x0, 0xa, "f813"}, @local=@item_4={0x3, 0x2, 0x8, "cf93f0b9"}, @main=@item_012={0x1, 0x0, 0xb, 'e'}, @main=@item_4={0x3, 0x0, 0xc, "9ae86258"}]}}, &(0x7f00000022c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x16, 0x4, 0x1, {0x22, 0x780}}}}, &(0x7f00000025c0)={0x2c, &(0x7f0000002340)={0x20, 0x9, 0x9b, "7b618392f5bc2067ef5175417d22ccf0d275f07947ca45c246318c07df75af3419c9e279194e97910c08918850693de07f7b6008de66ef884157890d2085497921cd850364c8312aa614088fa429146644b170fd4ff669cfa74e5826827a8a6e1fbab6cc9856fd2403a3ab5c734f05fc208bcd2a6390ca0023a3dd52f32fd8e642e2746d2068171a83ad89c67f24f3311a501fec098d50af22810c"}, &(0x7f0000002400)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000002440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002480)={0x20, 0x1, 0xd3, "bd168d449af8a9a5892adbcdd103045351550abbff5ac173a01fd86c51ec590c52e8fc0425156ae35f2d5a1259f028bfe55b1c6b9bb7cb9b425ccbcdff1929e51414afa9c41c6f0b8049d4f1e1e0f0581a14c5c02d1e1fcae6107358ad98526493a2497900e1eca50e8990d9c1752a8a67a007171d6c11ec16512a092feb6add7fafd4f349a80dc26db7f88c7f0a00644d4afce54908987ee9af295b4be318059eeae6f9d27d2660850cd20f94c023e3509d3da72b15cd14a137f3999de0a0154e90162a2515e642376090c2ba65d014dab7fb"}, &(0x7f0000002580)={0x20, 0x3, 0x1, 0x1}}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000002600)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1142, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x20, 0x36, [{{0x9, 0x4, 0x0, 0x47, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x79, 0x7f, 0x1, {0x22, 0xbba}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7f, 0x6, 0xf7}}}}}]}}]}}, &(0x7f0000002780)={0xa, &(0x7f0000002640)={0xa, 0x6, 0x310, 0x5, 0x2, 0x9, 0x20, 0xe0}, 0x5, &(0x7f0000002680)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f00000026c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000002700)=@lang_id={0x4, 0x3, 0x404}}, {0x1c, &(0x7f0000002740)=@string={0x1c, 0x3, "ffb2daedbf8489dca3cf2ff704ab7d3957163b36f593a18e8552"}}]}) r2 = syz_usb_connect$cdc_ncm(0x3, 0xc8, &(0x7f00000027c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x2, 0x1, 0xae, 0x40, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "01"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x5, 0x40, 0x8e}, {0x6, 0x24, 0x1a, 0x3, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x2, 0x7, 0x5}, @mdlm_detail={0x4d, 0x24, 0x13, 0xf6, "b1c48a9a6849d556009c28b2edc3d789ad6bf0da60d3c788d26f8d3c2ef7930c42da3a8a03f2e4732677f793976628e2496502a496343df5e1c3e171c048950ee7315c7bc00ce25ad2"}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x3, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x468, 0x0, 0x7f, 0x3}}}}}}}]}}, &(0x7f0000002a80)={0xa, &(0x7f00000028c0)={0xa, 0x6, 0x311, 0x8, 0xfa, 0x3, 0x40, 0xd}, 0x62, &(0x7f0000002900)={0x5, 0xf, 0x62, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xf, 0x7, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x40, 0x0, 0x1, 0xf0f, 0x1}, @ptm_cap={0x3}, @generic={0x44, 0x10, 0x3, "bd7a7ee09a9b0e643a1d9d747fef6b7c238d51651be2d9403c3a961646146476d381c94ecd049ae9019d9bb19bb30a2e2f5085b3499a3d80c96191a56518687b70"}]}, 0x4, [{0x4, &(0x7f0000002980)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f00000029c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x19, &(0x7f0000002a00)=@string={0x19, 0x3, "64442678e36dd67c1fce85a38d6acab315d884b1678e66"}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x410}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000002c40)={0x14, &(0x7f0000002b00)={0x40, 0x0, 0xef, {0xef, 0x22, "b2707ababdff3390d10eb839fbc294eda5bf3f43dcc586891f5524466475fb222ec4abeaf17edc121b1717a014c3d329fd13b2fc016aa5cb52f89f95091408c0f1a1c8538e1a1639279bedc3d5a4a530712678064bb2c131861fa7c7566e48d939acf0298d98dd5802d9e0c5103af508397ce2c59a2cdfb4b09d1a461539874c92e6f4215be2d20fcb4b5881bac8258a946ec0c014bf4342e7c3e268822d4916fc08721b8b2cc07ac1fdae5a8484ecf901fb08d3d854c7703419fc96d1fc85cdaee5b8220410a7b48752e3269d93124b301e425521fd1a5d43c9fabe16af1732e9506d1b426cfa2e586b163d39"}}, &(0x7f0000002c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f0000002f00)={0x44, &(0x7f0000002c80)={0x20, 0x10, 0x87, "2f4c0583d9355baa764bf3e4e77f53ead9487f61eb197af49db4688b1c2b8d523edc4ba8546bf47f5052613fd465ff76d6d16bc806f3fe93d5b3210b2895ab1da65cf3e6fc1adf5667db23ebf8a97751968c14cf5684c7e1adc102de45189c02e27044139961f15f44fb82ec09379a853f75eddba7e96fd2781f91d1b99f3956e048bdc8e188db"}, &(0x7f0000002d40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002d80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002dc0)={0x20, 0x81, 0x1, '\a'}, &(0x7f0000002e00)={0x20, 0x82, 0x2, "a321"}, &(0x7f0000002e40)={0x20, 0x83, 0x2, "3bf9"}, &(0x7f0000002e80)={0x20, 0x84, 0x4, "eb136a2c"}, &(0x7f0000002ec0)={0x20, 0x85, 0x3, "11c690"}}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000003080)={0x14, &(0x7f0000002f80)={0x0, 0xe, 0x7e, {0x7e, 0xd, "1845cc6106382e21af6b3ce0caa0ed85da67564c233291f073268a043188805fa52cecdf8b0744ecf07ce20f83dcb3b9a38cd2a49edc613de5f8ad97283f4dc425e67300ce11adb5207da4f2e1e1136e985a2eeff061520536abb3c7c822f0970dba1c1454adeab1dd653831ed775e9c3f99cff178f65dcf40e0d026"}}, &(0x7f0000003040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003300)={0x44, &(0x7f00000030c0)={0x40, 0x6, 0x4f, "46d1ce8a1499ef66fafda0da0642c221b420d920ea10b56842e7610459c949ea60df5a83fb8ae990bfa5958cc837699345be3387542e01c4e3ac98db5cc4b3a1020e96ac40abb7aa7a79c5de742d9e"}, &(0x7f0000003140)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000003180)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000031c0)={0x20, 0x80, 0x1c, {0x8, 0x1, 0x5, 0x4, 0x2e, 0x6, 0x800, 0x2, 0xaab, 0x3, 0x8, 0x9}}, &(0x7f0000003200)={0x20, 0x85, 0x4, 0x5a5c}, &(0x7f0000003240)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003280)={0x20, 0x87, 0x2, 0x1000}, &(0x7f00000032c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$rtl8150(r1, &(0x7f0000003480)={0x14, &(0x7f0000003380)={0x0, 0xb, 0x4d, {0x4d, 0x5, "d463d3c6f0fc3f57379218459e08933c55a3c7f534c251490323f85555a7b465f6513679319cedbc1e5e8562b8785c8c1b4663a95bfabad138494ee640210d1472417232eb497eb14d58f1"}}, &(0x7f0000003400)={0x0, 0x3, 0x75, @string={0x75, 0x3, "1f0dca088ccda03b6217a8174c607a309bb4b366d25917d13e0a9ce83b40aa6f935d7a41d913ddbc0924afdc56102cf250c77059925e8eee6cb988c09162e0569ee2c89a31b8f4026db4fdfdf54d60d9c1605ccf5fd505f9c6ee668b304025433dea312a8c029d81cd40c82077143ea2cc8bd6"}}}, &(0x7f0000003680)={0x2c, &(0x7f00000034c0)={0x0, 0x5, 0xa1, "a4febc1384ffdd8b214d01b00062998b33d88ce1b3983ed576b74edc1f60cb202986c951f30463314a76ef99a9c8202b4a0e74e8832ff6171b0c1ae369134ac3020c4a10439e67de811abf8ede3c772ff80762e0a7f97eb521f675f003845c9994a4e1d960b956e5569148f002233e1ab54284c9de8ce8a9bee0b8ac4a1cf8eed62d9217345314ffb8160c7c48e2787c3362f0d2d5922b7d65adf67f2bfcc43611"}, &(0x7f0000003580)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000035c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000003600)={0xc0, 0x5, 0x4, "9810eb4f"}, &(0x7f0000003640)={0x40, 0x5, 0x4, '4\x003&'}}) syz_usb_connect$cdc_ecm(0x1, 0x1b4, &(0x7f00000036c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a2, 0x1, 0x1, 0x7, 0x90, 0x92, [{{0x9, 0x4, 0x0, 0x65, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x8, 0x24, 0x6, 0x0, 0x0, "babc6b"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x500, 0x1, 0x6, 0x39}, [@mdlm_detail={0xeb, 0x24, 0x13, 0x5, "ef12541a99c0b0e7bb3d75ebf4e9485669fa094a164b52b27ee16a93400d86917b7661e3ac4ab3cbd78f6758aac0bcf2eda4f5d7eb81f67d4afb6267fc5ddf7c9d3194c403a3cd2a316c93a448e72ad8e19f7b865ddc7fd5e8c5bedefd54cdab9166dd24505357f0a925c2e6ea0cb88906b7c809547cc668d0eed480a4799c08a9cb4c183dcced14b5f06fb48c3b252c31b30ddf120c06397c74f0269e0ca5ac3075c98489625845d7467de157c7dcc3b0425b906f5a572cc112c7e8bf7c7fb15f768812106a2c9ff9256fcf3cc1680aed51c482778f9c3ac3f58c437227c729b8b4282ccb5757"}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x2, 0x9, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x1c61, 0xf6, 0x0, 0x5, 0x9}, @ncm={0x6, 0x24, 0x1a, 0x7ae, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @mdlm_detail={0x5b, 0x24, 0x13, 0x8, "c4db34b4cf93f69fc164ce719e78e999b852d909a1ff6017bbd5044403d16e167e88613a15e3131a69adb046be76733c59d372311a381d7de10a85a2fd945d3604b714adce427eaaf5103ff689d0ecbfe6c690e815753a"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xc, 0x4, 0x94}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x80, 0x1}}}}}]}}]}}, &(0x7f0000003bc0)={0xa, &(0x7f0000003880)={0xa, 0x6, 0x300, 0x6a, 0x7, 0x6, 0x10, 0x8}, 0xd0, &(0x7f00000038c0)={0x5, 0xf, 0xd0, 0x5, [@generic={0x85, 0x10, 0x1, "1ca5baf4b31648cfba476dd71051c041ca55aec397dee548d6e985efc14dd6872e16e658c2d824cfe47bacdf9a8bd319af9e69be758c26bfff894b0ad96d22f6abeb8a2f33ba84f3fe2abb08f22a348465c8908c5b9d7cd3bb23abcfb8a636d5fa39c6289e18e96099caafe5bcf02a677a23e619162790dc8d1db8b08eb69c45a5e6"}, @ssp_cap={0x14, 0x10, 0xa, 0xe1, 0x2, 0x9ad, 0xf, 0x4, [0xc0cf, 0xf0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xe8, 0x40, 0x101}, @ssp_cap={0x10, 0x10, 0xa, 0x12, 0x1, 0x7fffbff, 0xf, 0x4, [0xc030]}, @ssp_cap={0x18, 0x10, 0xa, 0x4, 0x3, 0x1, 0x1e000, 0x9, [0x30, 0xf0, 0x0]}]}, 0x6, [{0x4, &(0x7f00000039c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x49, &(0x7f0000003a00)=@string={0x49, 0x3, "9e4e9375d92b529d4f8acd40528baa82e0acd9ab6ef5361166f7e2cdf0bcf4f903c807f9235e5a5727c55b2a2dcba0b0fc44fe193316785b595ffd226a35dc045b287e266b191c"}}, {0x4, &(0x7f0000003a80)=@lang_id={0x4, 0x3, 0x1007}}, {0x6f, &(0x7f0000003ac0)=@string={0x6f, 0x3, "fe00fb4e2794e9c29573a3844ce46dc4d76088826ad64d2bef8c98dcc418e13515bca25e275ead468e9df9dba0a2e58ceb9ff1b0aaecbe1bf617307fde35a54ea0751097acafb188ed2339ba8765755ce890681e2d9bca780908376deeab72db4d107e9805c71ce586d2b21dab"}}, {0x4, &(0x7f0000003b40)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000003b80)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_connect$cdc_ncm(0x2, 0xa5, &(0x7f0000003c40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x2, 0x1, 0xe, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c12f76197c"}, {0x5, 0x24, 0x0, 0x221d}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x3, 0x9}, {0x6, 0x24, 0x1a, 0x9, 0x1e}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x7, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x9, 0x48, 0x2, 0x64, 0x1}, @obex={0x5, 0x24, 0x15, 0x6}, @mdlm={0x15}, @acm={0x4, 0x24, 0x2, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xa1, 0x0, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb6, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x2}}}}}}}]}}, &(0x7f0000004180)={0xa, &(0x7f0000003d00)={0xa, 0x6, 0x250, 0x0, 0x80, 0x7f, 0x87, 0x7f}, 0x17, &(0x7f0000003d40)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xc, 0xe, 0x68}, @wireless={0xb, 0x10, 0x1, 0xa, 0x84, 0x60, 0x3, 0x80, 0x3}]}, 0x8, [{0x4, &(0x7f0000003d80)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000003dc0)=@lang_id={0x4, 0x3, 0x43e}}, {0x99, &(0x7f0000003e00)=@string={0x99, 0x3, "727db0041251ce3b59abbfbc1f8e6d90dae3f75b1571a48ce2a3b8fcb759579c79da6d74e7d754568c5481d19baea1012d7d4ee24d0a75b9eb7297cf6dffe35bdd3baab4b426272bcc9d1bc61cb0298be204b5e8ec0a002c99c0ba5e0186510d61ebf0e4f7c1833df4a4c20e3627a0b4090ced2558afe7c840bd77ef5fac35f9c4d6d6cb9aa2df4a8c95a89b6e38bca5f784d1721a511d"}}, {0x4, &(0x7f0000003ec0)=@lang_id={0x4, 0x3, 0x1404}}, {0x8f, &(0x7f0000003f00)=@string={0x8f, 0x3, "f788b15c7c8a9eb160b16f3b0c86ae3ce9e6e9ff5f8a908af4444c34b99bc14b0cd2477db8acb4faca189e028c02f6fafc068ab618e0b31437eeab446bb8ef54fe9ec7c7628cf33a6cffd428768c5d61588877f36fe3762a2e916a27649d7b4757d3a96adccd49f7a506761e0473a1477b86cd281874b54270d599a1e1e2d18acd95db0e84ebd9723b88cfea3c"}}, {0x4, &(0x7f0000003fc0)=@lang_id={0x4, 0x3, 0x827}}, {0xea, &(0x7f0000004000)=@string={0xea, 0x3, "891772b8c5a5a9f398cb50d5244916eff9f302f260fa13ff800ac6fa85ce2281c386d45234e5bce1eff9c1d93ca79f975ee09f25a4d31bd8af5e0371497c96471905971bbe373f01c5dbf1709fc52d122a7b8492f587e1e316596e798a10a07b51d0428f44732ef0e5429782d2fb84178c56c0ca64fe327677bf2f4ead3abfc14996a179585b57dd7e684ed30b77b3df7490e39a49ddea9fc176f70aa4d9f867d79ab6165e475b600c16b69ad9ec7733e81a172d9d6dcbf133a7fca55cac92e7c215418eba750bf191d12d695e13115a018aa625be3efc024a8d3e68c12cf9df93d4f5ca7376e370"}}, {0x5f, &(0x7f0000004100)=@string={0x5f, 0x3, "7a872dab947410a0eeb16abb4035388ba5db9e3ac448e87afba4842b838508e70270f33e34863f2779fadb87f29b4a07c1fe20cd2abe2aaed377c304935b9436de79e23de31541e30ec8b33d046b66661f4b57941639f6c21dae884d96"}}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000004200), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000004240)={'syzkaller1\x00', @broadcast}) removexattr(&(0x7f0000004280)='./file0\x00', &(0x7f00000042c0)=@random={'trusted.', '/dev/net/tun\x00'}) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000004380)={0x14, &(0x7f0000004300)={0x40, 0xc, 0x8, {0x8, 0x21, "a2df81d07fbd"}}, &(0x7f0000004340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004640)={0x44, &(0x7f00000043c0)={0x60, 0xa, 0xb4, "56cb2dd32768d399a833e800cd7ad8b5bd8bc279e404782ffa5ef39932504e1569b2f5d77bd18cf3ef9e059f4dbe5fc0808908d5920af7147526c3f832d782cc6a71e0772b2f5e498c8ebf1c56d9e0c99043af08820897c57fdf479d0fedbe75d85cfd0ca277f4ec5e2d9f85a85beadca2c151af315d781751b9a3274449c29e4f1af24ad1bc7409eb20eab8d784f624b49996481813f052409286e06300760241b057e2e660786a45715a2f8b6d79dec6df4e59"}, &(0x7f0000004480)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000044c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000004500)={0x20, 0x80, 0x1c, {0x6, 0x1, 0x3, 0x7, 0x9, 0xf4, 0x0, 0x1, 0xfff, 0x3, 0xfffe, 0x81}}, &(0x7f0000004540)={0x20, 0x85, 0x4, 0xd8}, &(0x7f0000004580)={0x20, 0x83, 0x2}, &(0x7f00000045c0)={0x20, 0x87, 0x2, 0xb5}, &(0x7f0000004600)={0x20, 0x89, 0x2}}) syz_usb_control_io$sierra_net(r1, &(0x7f0000004800)={0x14, &(0x7f00000046c0)={0x0, 0x0, 0xdc, {0xdc, 0x0, "46305d254fdc03a7cf129582e7073dab204b7ecd9caed00cdcfe5eae4835c928ca7ef62dc5094bc1bf77d93384764d94817657042764445867a25cdf9ea83480c9eecf3a0bd608fdb82f2a2ccd1a28d8a50bdfed991ea411304d781c0ebc3982c0ba6b903a95ee9119cc7f2ce725e5d51e54d77e509e952ddecd4b284c7b71a7c5dcdb68ee487bdb39af8eb6ca94f3d8a16740f47ff0cbae61485c770e39aed9c4d7d7f1f2fce3deaa17555659a3c41989466b480111a98ba59831580a769e937cea30b7b5a8a0ff3b01ad3a9fb86730fb4640055a7243338e3f"}}, &(0x7f00000047c0)={0x0, 0x3, 0x22, @string={0x22, 0x3, "630088959a7079fb96b0ee2ef3b0f03e5dce2083bd0257a78b5b344d1bd270a4"}}}, &(0x7f0000004dc0)={0x1c, &(0x7f0000004840)={0x20, 0xf, 0xd6, "7dda0911b14807765aec2838d19ee5d29a7c15f06c8ba797a4f0df3faede453121038c95559ea55e015eb17ea9c045530c3a33d956fb5b5c7d575fa34b00d4ad2eb311e675a16aa0c6ffc5a603587ce98c8e9ab1e17a9deae4ad93cbd5297f4f9fdb26ab6337e69bef84217d503523580cb0b6288527d7df16151e75747cdc39e7c153cda5d17e525cdaa7a87bbf58eaa0a636b42a50989e6d97418452888ca53aad89c9cb0fa89365fce704c862efda4c7d585eb0d25e7e3853513b1286fb31ce0db74feb5ed0912f20ee115a6b8c1ab37e7e477e54"}, &(0x7f0000004940)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000004d80)={0x21, 0x0, 0x2, "6ce3"}}) syz_emit_vhci(&(0x7f0000004e00)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x1}}}, 0xd) openat$tun(0xffffffffffffff9c, &(0x7f0000004e40), 0x0, 0x0) timer_create(0x0, &(0x7f0000004f80)={0x0, 0x2, 0x1, @thr={&(0x7f0000004e80)="997fae4bf57706de17777ed1566aa6b66a81f089a3528ba41164cd56a5861141774d647839ec2208fe0ab9db5f083e866e19d61591b6ee72fc5f1529577b7136f959a16b21e7e6ea8b67c496b7", &(0x7f0000004f00)="28cc143ffb10b68430edd6fa2342cfda70d4be65ba97f6bb454907897ec9e6fc6773e4c6a535688cd043ad6e448a95ffd7acdbc540aa7f817fac545f16a41fec29db371c9e775e924b1072142c4e77c72cfe40591c08048cdc8b056cf2108299af5c127f7f19a0"}}, &(0x7f0000004fc0)) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000005140)={0x14, &(0x7f0000005000)={0x20, 0xf, 0xbd, {0xbd, 0xc, "9571c54d3ded04d109c18b83e2c26c9b97f0f2a336f886a5967b77f01a347280dd3adcfc7f384e7c0e097b08b419f5dbb9cf8e63cf77cbf0b05ac12c392f8de4d27e9fb60f0ba8f02a4e66dd998f371dcdd491f87a452054b2d84818e8d46f06db1cbec893659e92ca994d767950c7dcd4b741569456b3c95d9c54cc9979f69ea801753adfde5ff0ee4e3d6cfadeab0b9faf7ff72a113a8683289e4d87f52de9f7760dbae4d3840f8b1a3be6fb9aa7bde21e89d600a78c029dd5ce"}}, &(0x7f0000005100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005240)={0x1c, &(0x7f0000005180)={0x20, 0x0, 0x1d, "589b72f6025d6080f256595e765a8a70704efdddee830c2a62e439f83d"}, &(0x7f00000051c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000005200)={0x0, 0x8, 0x1, 0x4}}) syz_usb_control_io$lan78xx(r1, &(0x7f0000005300)={0x14, &(0x7f0000005280)={0x40, 0xc, 0x18, {0x18, 0x9, "cb0430303816ce5459a17688e527ca18f7cf1072fe95"}}, &(0x7f00000052c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f0000005500)={0x34, &(0x7f0000005340)={0x0, 0xc, 0x3c, "edd074c428827d4d41fba508640b55b06b9964bea133d3b8897a739b5941d11075f23b067b497c40e2f0d7ec38469a14a3f280d9cc2f6546996efe11"}, &(0x7f00000053c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000005400)={0x0, 0x8, 0x1, 0xc1}, &(0x7f0000005440)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000005480)={0x40, 0xa0, 0x4, 0x871e}, &(0x7f00000054c0)={0xc0, 0xa2, 0x2f, "c079f30b364805a759cf2ef59e3036b0b0144d4dd0984bc7fb7603c6c1e24ff1f680c79544dcc396fa3412fc8d5096"}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000005540)={@dev={0xfe, 0x80, '\x00', 0x2c}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff, 0x69, 0x101, 0x0, 0xfffffffffffff801, 0x4010002}) syz_usb_control_io$rtl8150(r1, &(0x7f0000005640)={0x14, &(0x7f00000055c0)={0x20, 0x2, 0x11, {0x11, 0x8, "e59c5c76987e9b26436330dbd275b4"}}, &(0x7f0000005600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000005800)={0x2c, &(0x7f0000005680)={0x40, 0x16, 0x44, "c0d84746a219367dbee83db518d7d2e27b2230cd40aa1e6a70f401a2e624d34bfa90e68af0c368fa1995abfee2774c6d15779c4f4335a3d8235533a573c47b1b7688feb4"}, &(0x7f0000005700)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000005740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000005780)={0xc0, 0x5, 0x1, "92"}, &(0x7f00000057c0)={0x40, 0x5, 0x2, "0f13"}}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000005940)={0x14, &(0x7f0000005840)={0x40, 0xd, 0xb2, {0xb2, 0x2, "9a8d63c8eae38f6c3a088ae78a557c278b18c41f8e5dfcb2c464a70a3f8e083c53032dcc0290827df1d52a8fbe4786932747f423f5440330e3ea5328e7df0cc97b53b1a92ff81710bb6f34ff8dbbc7abb4a61c299c9babcc1ceed49f2085861241b7a0641305f24b5e4026f5412847b1c42c88012a32ba4742097b423d37c7bc5d51b4a45551b440ccd9fbac88f149b66f0953eadfbdef707e33578f2ca0e719a21ca588013585284ad077c21dbeea43"}}, &(0x7f0000005900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000005bc0)={0x44, &(0x7f0000005980)={0x40, 0x14, 0x72, "77c1382d229c13f840de1d54d121cc4dbbdd99627a5629eb2eee371775b7590e2918ae598980e5fd0facd5f77af028a71117cafddc43c51ece35bb7c5ef988e29255b73f767ab5214149d6f597ba657afc3776b6917c57dce00b2db3fb961dd25b23815a46babebe94ad63d8b1f5dad7d9cf"}, &(0x7f0000005a00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000005a40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000005a80)={0x20, 0x80, 0x1c, {0x203d, 0x6, 0xffffffb6, 0x5, 0x7ff, 0x0, 0x4, 0x1, 0x40, 0x18, 0x3, 0x3ff}}, &(0x7f0000005ac0)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000005b00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000005b40)={0x20, 0x87, 0x2, 0xd}, &(0x7f0000005b80)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000005d00)={0x14, &(0x7f0000005c40)={0x40, 0x4, 0x65, {0x65, 0x6, "31e11547d479fb27cda1f60f2f93bb131a8c2edf089f164cfb5293ade2d94afe45f89d8c05864b02636210d76e6c416a392a2ef8f0bcfdfc2860966c42c736fdd5e28f5019abbd68522f813bf1dee5ab42a281b60d448379a6fb50d1d4217997998db6"}}, &(0x7f0000005cc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000006000)={0x44, &(0x7f0000005d40)={0x0, 0x5, 0xcf, "5c27a33cfa4a4346ae31b7c203e77abc9eef0c664462ff22fddf4b28dd2955a24c243186caf4aa416901ff09bcb41b6b28a545737e07a08a77d2c473ae812a606bb3ebaba68107ee83bac7f8e42b176273f524065bb6281603ef2153c7947f16718fe699ea31f3dc5c9ab3107c694aa9db07179331ad5832599f9ee1d2542bb028ab48f8db53c8af03fb7dcc3f2ce1f70376c15eff0811e1b2085e8e542b606d8f213c3d16a143d992cd7f1059c6765b5c95aa2246d6de0859a34751372afe3e12d199398d7795b8d26b64c24d2a31"}, &(0x7f0000005e40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000005e80)={0x0, 0x8, 0x1, 0xab}, &(0x7f0000005ec0)={0x20, 0x80, 0x1c, {0x4, 0x1, 0x5, 0x5, 0x578, 0x2, 0x1, 0x80, 0x9, 0x7c7f, 0x5, 0x5}}, &(0x7f0000005f00)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000005f40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000005f80)={0x20, 0x87, 0x2, 0x180d}, &(0x7f0000005fc0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$printer(r1, &(0x7f0000006280)={0x14, &(0x7f0000006080)={0x0, 0x1, 0xfe, {0xfe, 0x10, "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"}}, &(0x7f00000061c0)={0x0, 0x3, 0xac, @string={0xac, 0x3, "a8a4e89b3a2861962abe5c315ba9cb0cbf8a5d27a00468305f5eb4d2b2ec7ddf548ed799f5d33d374ec118bc6af69c18c7a61269c2b058dc2d6c22feb00f72b4c60270577810bea626f189fb976ef58a91cf247ad43677fe5150699905eda0a7efbbecf68c94f70b041ca9103337569d3c33314b8ed10da17b9999365b1126c6e20dca937218f79087c0e69c03fc850342c9e696414e22da71152f88d43c1024cd803e3282138ec4d2bd"}}}, &(0x7f0000006540)={0x34, &(0x7f00000062c0)={0x0, 0x8, 0x7, "43d7141d1aa45e"}, &(0x7f0000006300)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000006340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000006380)={0x20, 0x0, 0xfe, {0xfc, "7585eef4b893fde4be22647aa0d96d5780b63ea9fc512f568f7f2acaf78dbdf6e67d62a23ff0d93a553870dbe1a9069eced6aac230abc33966b3aecd2e65a23cc5f3cf0bf2a7728b70d8b14f0232f98cf1b24069b393185f48065f57f1f41dce41d8f1f641899427e3d035c3ad8b9be778a32319c04e8ae4818f4e41708b5ffe8a08778cc830d497439a20dcb410387c5fe7d1b501ad25fb8bda37c3169c10b3e61f31a03c88e20a6e416cff8e00d5b7a1bc93aea6eb25ee5093511f35d62aa16f4db06475112dcfefde7d6698acae10869ed06df5a538e2283dfe4de514c1725314c922a3ba0b950e0139dffc570c9c4efef9e9cf476cc679a858d6"}}, &(0x7f00000064c0)={0x20, 0x1, 0x1, 0x4b}, &(0x7f0000006500)={0x20, 0x0, 0x1, 0x2}}) 3.709122054s ago: executing program 4 (id=3197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x1000000, 0x0, 0x1, 0x0, &(0x7f0000000280)="f8"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_handle={0x77682a85, 0x100, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 3.298333032s ago: executing program 1 (id=3205): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x29, 0x3, 0x37) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2920a482b46af99d, 0x0) r3 = memfd_create(&(0x7f0000000200)='limit\x00', 0x4) add_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="b1d06e9ef68a7dbaa3b61beb77f9418b30e64a57181d8e03b416633a27afd0f8a9b7045f94022c472138db687ae308a544793e82203beccbad74c6f1845136c08b", 0x41, 0xfffffffffffffffd) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x80, 0x6d5, 0x5, 0x20118, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x5, 0x5}, 0x50) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000240)={'streebog512-generic\x00'}}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000240)={r3, 0x0, 0x0, 0x10000}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04050400c900"], 0x7) 2.839314938s ago: executing program 4 (id=3206): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x8c, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x30}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x811}, 0x40000) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x800}}}}}, 0x0) 2.839072738s ago: executing program 4 (id=3207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) (fail_nth: 2) close(r1) syz_open_dev$ttys(0xc, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.325316907s ago: executing program 1 (id=3211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f"]) (async) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x5, 0x6, 0x0, 0xc619, 0xfffffffe, 0x1, 0x6, 0x7fffffff}) (async) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r6, &(0x7f0000000940)={'#! ', './file0', [{0x20, '/dev/sr0\x00'}]}, 0x15) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf00c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.109443924s ago: executing program 3 (id=3214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000001c0)={0xc4, 0x0, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={r3, r4, 0x1, 0x0, 0x3}) 2.109166145s ago: executing program 1 (id=3215): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x29}, @fda={0x66646185, 0xffffffffffffffff, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) statx(0xffffffffffffffff, &(0x7f00000023c0)='./file0\x00', 0x0, 0x800, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002680)={0x160, 0x0, r5, [{{0x2, 0x3, 0x1, 0x6, 0x5, 0x4, {0x5, 0x3, 0x800, 0x7fffffffffffffff, 0x8, 0x100000000, 0x1a17, 0xec, 0x2, 0x0, 0x1, r6, r7, 0xffff, 0xf2}}, {0x3, 0x9, 0x10, 0x5, '\xfdS0/\xd1\x1b\xd6\xb9\xebF0jd\xc8:Z'}}, {{0x5, 0x2, 0x1000, 0x1ff, 0x5, 0x1, {0x2, 0x496, 0xffffffffffffffff, 0x5, 0x8, 0x87a, 0xfffffffa, 0x6, 0xffff6149, 0x4000, 0x10001, r8, r9, 0x81, 0x45bb}}, {0x2, 0x8, 0x9, 0x6, 'devtmpfs\x00'}}]}, 0x160) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80060, &(0x7f0000000000)=ANY=[@ANYBLOB="75737271756f74615f696e6f64d0c9a4cf44f19cf91d951497b9de655f686172646c696d69743d322c0099cd5d7ccb55e49ce908ba5be3cbc9d8a9c8cb7b827c139984db9184e39e229f2862f1cd5f4136f650b3c29ad0e42708aa6c5e67af917cd995b91806c4286b5a"]) 2.10831808s ago: executing program 1 (id=3216): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xc7) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) write(0xffffffffffffffff, &(0x7f0000000140)="41000200010001", 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x0, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x8500, 0x1003, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x0, 0x4, 0x8049]}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x9}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x141201, 0x0) socket(0x29, 0x800, 0x547c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x369d) 1.98004565s ago: executing program 3 (id=3217): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004081}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac141400", @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x100000000000000) 1.849753928s ago: executing program 3 (id=3218): landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000001740)={0x2020, 0x0, 0x0}, 0x2020) ioperm(0x0, 0x2, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x6, 0x0) write$FUSE_LK(r0, &(0x7f0000000380)={0x28, 0x0, r1, {{0x7, 0x7fffffffffffffff, 0x2}}}, 0x28) mount$overlay(0x0, 0x0, 0x0, 0x200800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) 1.169636206s ago: executing program 1 (id=3219): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x29, 0x3, 0x37) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2920a482b46af99d, 0x0) r3 = memfd_create(&(0x7f0000000200)='limit\x00', 0x4) add_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)="b1d06e9ef68a7dbaa3b61beb77f9418b30e64a57181d8e03b416633a27afd0f8a9b7045f94022c472138db687ae308a544793e82203beccbad74c6f1845136c08b", 0x41, 0xfffffffffffffffd) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xb, 0x80, 0x6d5, 0x5, 0x20118, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x5, 0x5}, 0x50) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, &(0x7f0000000400), &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000240)={'streebog512-generic\x00'}}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000240)={r3, 0x0, 0x0, 0x10000}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04050400c900"], 0x7) 1.017951538s ago: executing program 2 (id=3220): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0xf0}, 0x0) 1.017622317s ago: executing program 2 (id=3221): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x3, 0x7fff, 0x60, 0x3, 0x1, "2eb975b86bc7e2c5"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0xf}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002600000008000300", @ANYRES32=r3, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c09"], 0x44}}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg/2:0:0:0\x00', 0x68440, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000004c0)=0xff) 1.017486721s ago: executing program 3 (id=3222): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x2, &(0x7f0000000080)=[@iv={0x0, 0x117, 0x2, 0x0, "04516a552f44187340ea9ce8d7abcf97a173c1c5e8a60c634fa21187739003c8ac6adf1b0b3a36de7f8354"}], 0xffffffffffffffc2}], 0x1, 0x40800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7c}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x24040c00) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 949.399047ms ago: executing program 3 (id=3223): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0xd, 0xa, 0x3, "325800000000000000008faa001d0000f4ff400000000000010000001400", 0x39555659}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 947.573688ms ago: executing program 2 (id=3224): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x800455ca, 0x100000400000008) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000040000000400fc800c00018008"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r3, 0x8de13c6b70ae92c3, 0x41403, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x28000800}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1a}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x24}}, 0x200040c4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xca5}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 869.847882ms ago: executing program 2 (id=3225): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x61, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d300009dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x4, {0xfeffffffffffffff, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0x6, 0x3966, 0x1, 0x4000, 0x3, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r6, 0x0, 0x0) capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r7, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) getpeername$tipc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) membarrier(0x40, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB='decodes '], 0xd) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x3c, r9, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 659.170893ms ago: executing program 3 (id=3226): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x9, 0x0, 0x0, 0x17, 0x14, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4b69d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "3bc529791f04004dc252840b0000000000f2fffff2845d9ee84ef80b7407cfbe", [0xfffffffffeff7ff9]}}) r0 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0xfffffffc, '\x00', @string=&(0x7f0000000080)=0x11}}) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000180)=""/135) 250.022812ms ago: executing program 1 (id=3227): capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x84, 0xffffffff, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) listen(0xffffffffffffffff, 0x3) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f080, 0x19}) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000ac0)={r6, 0xd0}, &(0x7f0000000b00)=0x8) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000081) 0s ago: executing program 2 (id=3228): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000040)='./file1\x00', 0x0, 0xee00) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt$sock_int(r2, 0x1, 0x27, 0x0, &(0x7f0000000240)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r1, 0x0, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x1a, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa1a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @cb_func={0x18, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2, '\x00', r5, @fallback=0x9, r0, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x5, 0xffffffff, 0x3}, 0x10, 0xffffffffffffffff, r0, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=[{0x3, 0x2, 0xc, 0x4}, {0x5, 0x5, 0xe, 0x4}], 0x10, 0x400}, 0x94) write$cgroup_int(r0, &(0x7f0000000040)=0x1c9, 0x12) kernel console output (not intermixed with test programs): d' [ 313.059587][T14036] loop2: detected capacity change from 0 to 7 [ 313.070683][ T6141] Dev loop2: unable to read RDB block 7 [ 313.073907][ T6141] loop2: AHDI p1 p2 p3 [ 313.075612][ T6141] loop2: partition table partially beyond EOD, truncated [ 313.076761][T14040] nbd: must specify at least one socket [ 313.079044][ T6141] loop2: p1 start 1601398130 is beyond EOD, truncated [ 313.083522][ T6141] loop2: p2 start 1702059890 is beyond EOD, truncated [ 313.093261][T14036] Dev loop2: unable to read RDB block 7 [ 313.095562][T14036] loop2: AHDI p1 p2 p3 [ 313.097268][T14036] loop2: partition table partially beyond EOD, truncated [ 313.100953][T14036] loop2: p1 start 1601398130 is beyond EOD, truncated [ 313.105007][T14036] loop2: p2 start 1702059890 is beyond EOD, truncated [ 313.601301][T14067] FAULT_INJECTION: forcing a failure. [ 313.601301][T14067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.606776][T14067] CPU: 2 UID: 0 PID: 14067 Comm: syz.3.2638 Not tainted syzkaller #0 PREEMPT(full) [ 313.606796][T14067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.606806][T14067] Call Trace: [ 313.606811][T14067] [ 313.606817][T14067] dump_stack_lvl+0x16c/0x1f0 [ 313.606859][T14067] should_fail_ex+0x512/0x640 [ 313.606889][T14067] _copy_to_user+0x32/0xd0 [ 313.606910][T14067] comedi_unlocked_ioctl+0x26e2/0x2f00 [ 313.606928][T14067] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 313.606947][T14067] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 313.606967][T14067] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 313.606990][T14067] ? hook_file_ioctl_common+0x145/0x410 [ 313.607013][T14067] ? selinux_file_ioctl+0x180/0x270 [ 313.607035][T14067] ? selinux_file_ioctl+0xb4/0x270 [ 313.607061][T14067] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 313.607082][T14067] __x64_sys_ioctl+0x18e/0x210 [ 313.607111][T14067] do_syscall_64+0xcd/0x4e0 [ 313.607137][T14067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.607153][T14067] RIP: 0033:0x7ff18c18ec29 [ 313.607167][T14067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.607184][T14067] RSP: 002b:00007ff18cfe2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.607200][T14067] RAX: ffffffffffffffda RBX: 00007ff18c3d5fa0 RCX: 00007ff18c18ec29 [ 313.607212][T14067] RDX: 00002000000007c0 RSI: 0000000080506409 RDI: 0000000000000003 [ 313.607243][T14067] RBP: 00007ff18cfe2090 R08: 0000000000000000 R09: 0000000000000000 [ 313.607255][T14067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.607264][T14067] R13: 00007ff18c3d6038 R14: 00007ff18c3d5fa0 R15: 00007ffef43d72f8 [ 313.607289][T14067] [ 313.832611][ T63] Bluetooth: hci3: command tx timeout [ 313.861696][T14083] fuse: Unknown parameter '0x0000000000000005' [ 313.972731][T14088] random: crng reseeded on system resumption [ 314.112388][ T840] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 314.233545][T14098] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2651'. [ 314.239134][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2651'. [ 314.252080][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2652'. [ 314.266679][ T840] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 314.272075][ T40] kauditd_printk_skb: 217 callbacks suppressed [ 314.272090][ T40] audit: type=1400 audit(1758544997.408:34490): avc: denied { read write } for pid=13693 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.285108][ T40] audit: type=1400 audit(1758544997.408:34491): avc: denied { open } for pid=13693 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.293538][ T40] audit: type=1400 audit(1758544997.418:34492): avc: denied { ioctl } for pid=13693 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 314.302430][ T840] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 314.305236][ T840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.307724][ T840] usb 8-1: Product: syz [ 314.308995][ T840] usb 8-1: Manufacturer: syz [ 314.310404][ T840] usb 8-1: SerialNumber: syz [ 314.320196][ T840] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 314.324218][ T40] audit: type=1400 audit(1758544997.468:34493): avc: denied { read } for pid=14105 comm="syz.1.2655" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 314.333465][ T40] audit: type=1400 audit(1758544997.478:34494): avc: denied { read write } for pid=14105 comm="syz.1.2655" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 314.341362][ T40] audit: type=1400 audit(1758544997.478:34495): avc: denied { open } for pid=14105 comm="syz.1.2655" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 314.343213][T14110] ./file1: Can't lookup blockdev [ 314.349461][ T40] audit: type=1400 audit(1758544997.478:34496): avc: denied { ioctl } for pid=14105 comm="syz.1.2655" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 314.359509][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2656'. [ 314.361235][ T40] audit: type=1400 audit(1758544997.478:34497): avc: denied { mounton } for pid=14109 comm="syz.4.2656" path="/471/file1" dev="tmpfs" ino=2505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 314.370891][ T40] audit: type=1400 audit(1758544997.498:34498): avc: denied { create } for pid=14109 comm="syz.4.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 314.377104][ T40] audit: type=1400 audit(1758544997.498:34499): avc: denied { ioctl } for pid=14109 comm="syz.4.2656" path="socket:[48523]" dev="sockfs" ino=48523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 314.423923][T14119] fuse: Unknown parameter '0x0000000000000005' [ 314.591969][ T840] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 314.604329][ T840] usb 8-1: USB disconnect, device number 27 [ 315.042798][T14160] tipc: Started in network mode [ 315.044573][T14160] tipc: Node identity 7f000001, cluster identity 4711 [ 315.047945][T14160] tipc: Enabled bearer , priority 10 [ 315.058684][T14161] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 315.061950][T14161] tipc: Enabled bearer , priority 10 [ 315.112716][T14166] netlink: 212288 bytes leftover after parsing attributes in process `syz.3.2676'. [ 315.430726][T14179] [U] ù [ 315.732081][T14193] fuse: Unknown parameter 'fd0x0000000000000005' [ 315.805285][T14195] comedi comedi4: bad chanlist[0]=0x00400008 chan=8 range length=2 [ 315.898100][T14201] overlayfs: missing 'lowerdir' [ 316.077702][T14213] overlayfs: conflicting lowerdir path [ 316.138539][T14220] overlayfs: missing 'lowerdir' [ 316.172550][ T6050] tipc: Node number set to 2130706433 [ 316.277074][T14227] kernel read not supported for file /policy (pid: 14227 comm: syz.3.2696) [ 316.495555][T14231] random: crng reseeded on system resumption [ 316.693259][T14246] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2707'. [ 316.698449][T14246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2707'. [ 316.956661][ T1425] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.976412][T14257] netlink: 'syz.4.2710': attribute type 83 has an invalid length. [ 317.043757][T14262] tun0: tun_chr_ioctl cmd 1074025677 [ 317.045561][T14262] tun0: linktype set to 804 [ 317.061934][T14263] overlayfs: failed to resolve './file1': -2 [ 317.142842][T14269] sp0: Synchronizing with TNC [ 317.146935][T14268] [U] è`` [ 317.288361][T14274] fuse: Bad value for 'fd' [ 317.444632][T14279] netlink: 'syz.1.2720': attribute type 1 has an invalid length. [ 317.447758][T14279] netlink: 'syz.1.2720': attribute type 4 has an invalid length. [ 317.450854][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2720'. [ 318.379514][T14301] fuse: Bad value for 'fd' [ 318.438593][T14303] comedi comedi4: bad chanlist[0]=0x00400008 chan=8 range length=2 [ 318.638363][T14310] trusted_key: encrypted_key: insufficient parameters specified [ 318.644399][T14310] trusted_key: encrypted_key: master key parameter '®9¡°rtlÙÂ2l†M 1-üò„E98×L˜Õ{¸™ÐïI[cÀŽ¬mvˆ«Cˆ‚ÔlwW*}1Åÿ(1ѹA]º¾y¤+“U¶ÈÇÚB° ø`Ñö¯5M¢«äÚÅ-EK±m¡Ò,Êçä§À&Æ#ì×úº¹™U5¹ÑÚ»õK5  [ 318.644399][T14310] 6îEÚ€i«' is invalid [ 318.658207][T14310] binder_alloc: 14309: binder_alloc_buf, no vma [ 319.539035][ T40] kauditd_printk_skb: 230 callbacks suppressed [ 319.539046][ T40] audit: type=1400 audit(1758545002.678:34730): avc: denied { unmount } for pid=13693 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 319.561127][ T40] audit: type=1400 audit(1758545002.698:34731): avc: denied { write } for pid=14322 comm="syz.1.2736" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 319.568569][ T40] audit: type=1400 audit(1758545002.698:34732): avc: denied { map } for pid=14322 comm="syz.1.2736" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 319.576052][ T40] audit: type=1400 audit(1758545002.708:34733): avc: denied { create } for pid=14322 comm="syz.1.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 319.583697][ T40] audit: type=1400 audit(1758545002.708:34734): avc: denied { write } for pid=14322 comm="syz.1.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 319.669078][ T40] audit: type=1400 audit(1758545002.808:34735): avc: denied { read write } for pid=14322 comm="syz.1.2736" name="video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 319.680544][ T40] audit: type=1400 audit(1758545002.808:34736): avc: denied { open } for pid=14322 comm="syz.1.2736" path="/dev/video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 319.690040][ T40] audit: type=1400 audit(1758545002.808:34737): avc: denied { ioctl } for pid=14322 comm="syz.1.2736" path="/dev/video1" dev="devtmpfs" ino=956 ioctlcmd=0x5600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 319.743135][ T40] audit: type=1400 audit(1758545002.888:34738): avc: denied { create } for pid=14326 comm="syz.4.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 319.751777][ T40] audit: type=1400 audit(1758545002.888:34739): avc: denied { write } for pid=14326 comm="syz.4.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 319.840431][T14331] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2738'. [ 319.859830][T14331] xt_socket: unknown flags 0xd0 [ 319.867621][T14333] openvswitch: netlink: IP tunnel dst address not specified [ 319.879093][T14331] netlink: 'syz.1.2738': attribute type 11 has an invalid length. [ 320.262360][ T1339] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 320.419233][ T1339] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 320.422367][ T1339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.425137][ T1339] usb 6-1: Product: syz [ 320.426570][ T1339] usb 6-1: Manufacturer: syz [ 320.428168][ T1339] usb 6-1: SerialNumber: syz [ 320.640791][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2740'. [ 320.697350][T14351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.701039][T14351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.711149][T14357] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 320.714126][T14357] overlayfs: missing 'lowerdir' [ 320.721682][ T1339] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 320.732469][ T1339] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 320.736714][ T1339] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 320.745286][ T1339] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 320.753640][ T1339] usb 6-1: USB disconnect, device number 32 [ 320.897049][T14379] netlink: 'syz.4.2754': attribute type 10 has an invalid length. [ 320.899726][T14379] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2754'. [ 320.903527][T14379] batadv0: entered promiscuous mode [ 320.905456][T14379] batadv0: entered allmulticast mode [ 320.907421][T14379] bridge0: port 3(batadv0) entered blocking state [ 320.909523][T14379] bridge0: port 3(batadv0) entered disabled state [ 321.009348][T14387] overlayfs: invalid origin (000000790066696c6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 321.132088][T14394] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input19 [ 321.173105][ T13] batman_adv: batadv0: IGMP Querier appeared [ 321.175127][ T13] batman_adv: batadv0: MLD Querier appeared [ 321.295177][T14420] syz.3.2770: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 321.662076][T14430] random: crng reseeded on system resumption [ 322.086739][T14452] overlayfs: missing 'lowerdir' [ 322.164200][T14456] overlayfs: missing 'lowerdir' [ 322.512339][ T24] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 322.520377][T14477] tmpfs: Unknown parameter 'fowner>00000000000000000000' [ 322.666431][ T24] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 322.673418][ T24] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 322.677107][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.680353][ T24] usb 8-1: Product: syz [ 322.682388][ T24] usb 8-1: Manufacturer: syz [ 322.684402][ T24] usb 8-1: SerialNumber: syz [ 322.691794][ T24] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 322.788740][T14441] [U] ùÿ [ 323.076161][ T24] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 323.084303][ T24] usb 8-1: USB disconnect, device number 28 [ 323.269680][T14490] overlayfs: missing 'lowerdir' [ 323.318006][T14492] binder_alloc: 14491: binder_alloc_buf, no vma [ 323.408365][T14496] netlink: 'syz.2.2798': attribute type 4 has an invalid length. [ 323.414013][T14496] nbd_handle_cmd: 4 callbacks suppressed [ 323.414025][T14496] block nbd2: Attempted send on invalid socket [ 323.418028][T14496] blk_print_req_error: 4 callbacks suppressed [ 323.418041][T14496] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.429590][T14496] block nbd2: Attempted send on invalid socket [ 323.432884][T14496] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.438580][T14496] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 323.441916][T14496] block nbd2: Attempted send on invalid socket [ 323.444603][T14496] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.450139][T14496] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 323.453695][T14496] block nbd2: Attempted send on invalid socket [ 323.455732][T14496] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.459440][T14496] block nbd2: Attempted send on invalid socket [ 323.461348][T14496] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.465547][T14496] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 323.468635][T14496] block nbd2: Attempted send on invalid socket [ 323.470518][T14496] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.473889][T14496] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 323.479010][ T1265] block nbd2: Attempted send on invalid socket [ 323.481538][ T1265] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.487360][T14496] block nbd2: Attempted send on invalid socket [ 323.489738][T14496] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.493858][T14496] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 323.497330][T14496] block nbd2: Attempted send on invalid socket [ 323.499295][T14496] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.502443][T14496] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 323.506212][T14496] block nbd2: Attempted send on invalid socket [ 323.508225][T14496] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 323.511097][T14496] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 323.514682][T14496] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 323.521512][T14496] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 323.567489][T14512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2802'. [ 323.589105][T14510] random: crng reseeded on system resumption [ 323.648655][T14518] overlayfs: failed to clone upperpath [ 323.820971][T14533] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 323.885446][T14535] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 323.890206][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.894792][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.931455][T14535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.959216][T14535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2812'. [ 324.052506][ T9] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 324.091352][T14546] overlayfs: failed to clone upperpath [ 324.145920][T14549] vxcan1 speed is unknown, defaulting to 1000 [ 324.215102][ T9] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 324.220677][ T9] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 324.224269][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.226889][ T9] usb 8-1: Product: syz [ 324.228361][ T9] usb 8-1: Manufacturer: syz [ 324.230172][ T9] usb 8-1: SerialNumber: syz [ 324.244930][ T9] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 324.407172][T14553] ipvlan2: entered promiscuous mode [ 324.410086][T14553] bridge0: port 3(ipvlan2) entered blocking state [ 324.413542][T14553] bridge0: port 3(ipvlan2) entered disabled state [ 324.415895][T14553] ipvlan2: entered allmulticast mode [ 324.417717][T14553] bridge0: entered allmulticast mode [ 324.421037][T14553] ipvlan2: left allmulticast mode [ 324.423067][T14553] bridge0: left allmulticast mode [ 324.529333][ T9] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 324.550377][ T9] usb 8-1: USB disconnect, device number 29 [ 324.559356][ T40] kauditd_printk_skb: 281 callbacks suppressed [ 324.559365][ T40] audit: type=1400 audit(1758545007.698:35021): avc: denied { read write } for pid=14573 comm="syz.2.2825" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 324.569558][T14574] binder: 14573:14574 ioctl c0306201 200000000380 returned -11 [ 324.569650][ T40] audit: type=1400 audit(1758545007.698:35022): avc: denied { open } for pid=14573 comm="syz.2.2825" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 324.575641][T14574] binder: BINDER_SET_CONTEXT_MGR already set [ 324.582125][ T40] audit: type=1400 audit(1758545007.708:35023): avc: denied { ioctl } for pid=14573 comm="syz.2.2825" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 324.587247][T14574] binder: 14573:14574 ioctl 4018620d 200000004a80 returned -16 [ 324.599720][ T40] audit: type=1400 audit(1758545007.708:35024): avc: denied { set_context_mgr } for pid=14573 comm="syz.2.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 324.599846][T14574] binder: 14573:14574 ioctl c0306201 2000000004c0 returned -22 [ 324.612107][ T40] audit: type=1400 audit(1758545007.718:35025): avc: denied { map } for pid=14573 comm="syz.2.2825" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 324.686270][ T40] audit: type=1400 audit(1758545007.828:35026): avc: denied { read write } for pid=12179 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 324.697677][ T40] audit: type=1400 audit(1758545007.828:35027): avc: denied { open } for pid=12179 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 324.705822][ T40] audit: type=1400 audit(1758545007.828:35028): avc: denied { ioctl } for pid=12179 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 324.722915][ T40] audit: type=1400 audit(1758545007.868:35029): avc: denied { create } for pid=14579 comm="syz.1.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 324.730227][ T40] audit: type=1400 audit(1758545007.868:35030): avc: denied { read } for pid=14579 comm="syz.1.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 325.045223][T14591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2833'. [ 325.059458][T14591] comedi comedi4: bad chanlist[0]=0x00000070 chan=112 range length=2 [ 325.106136][T14594] overlayfs: workdir and upperdir must reside under the same mount [ 325.197284][T14603] overlayfs: missing 'workdir' [ 325.283978][ T63] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 325.287728][ T63] Bluetooth: hci2: Injecting HCI hardware error event [ 325.294000][ T5976] Bluetooth: hci2: hardware error 0x00 [ 325.294972][T14606] loop6: detected capacity change from 0 to 524288000 [ 325.963816][T14613] /dev/nullb0: Can't open blockdev [ 326.239251][T14627] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 326.248004][T14627] program syz.3.2846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.310729][ T840] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 326.356919][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2851'. [ 326.474401][ T840] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 326.480782][ T840] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 326.485878][ T840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.489182][ T840] usb 6-1: Product: syz [ 326.490939][ T840] usb 6-1: Manufacturer: syz [ 326.494023][ T840] usb 6-1: SerialNumber: syz [ 326.505511][T14647] overlayfs: failed to resolve './file1': -2 [ 326.508972][ T840] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 326.539693][T14649] 9pnet_fd: Insufficient options for proto=fd [ 326.770602][ T840] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 326.789195][ T840] usb 6-1: USB disconnect, device number 33 [ 327.174734][T14678] netlink: 'syz.2.2870': attribute type 1 has an invalid length. [ 327.177946][T14678] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2870'. [ 327.189833][T14674] FAULT_INJECTION: forcing a failure. [ 327.189833][T14674] name failslab, interval 1, probability 0, space 0, times 0 [ 327.194655][T14674] CPU: 2 UID: 0 PID: 14674 Comm: syz.3.2868 Not tainted syzkaller #0 PREEMPT(full) [ 327.194671][T14674] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 327.194678][T14674] Call Trace: [ 327.194682][T14674] [ 327.194686][T14674] dump_stack_lvl+0x16c/0x1f0 [ 327.194733][T14674] should_fail_ex+0x512/0x640 [ 327.194751][T14674] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 327.194766][T14674] should_failslab+0xc2/0x120 [ 327.194779][T14674] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 327.194790][T14674] ? copy_process+0x4b6/0x7690 [ 327.194806][T14674] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.194825][T14674] copy_process+0x4b6/0x7690 [ 327.194846][T14674] ? __pfx_copy_process+0x10/0x10 [ 327.194863][T14674] ? lockdep_init_map_type+0x5c/0x280 [ 327.194876][T14674] ? lockdep_init_map_type+0x5c/0x280 [ 327.194886][T14674] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 327.194902][T14674] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 327.194920][T14674] vhost_task_create+0x1d2/0x2e0 [ 327.194931][T14674] ? __pfx_vhost_task_create+0x10/0x10 [ 327.194946][T14674] ? __pfx_vhost_task_fn+0x10/0x10 [ 327.194964][T14674] kvm_mmu_post_init_vm+0x1b7/0x380 [ 327.194978][T14674] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 327.194994][T14674] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 327.195012][T14674] kvm_vcpu_ioctl+0x5eb/0x1690 [ 327.195028][T14674] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 327.195042][T14674] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 327.195056][T14674] ? do_vfs_ioctl+0x128/0x14f0 [ 327.195074][T14674] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 327.195090][T14674] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 327.195132][T14674] ? hook_file_ioctl_common+0x145/0x410 [ 327.195147][T14674] ? selinux_file_ioctl+0x180/0x270 [ 327.195163][T14674] ? selinux_file_ioctl+0xb4/0x270 [ 327.195179][T14674] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 327.195194][T14674] __x64_sys_ioctl+0x18e/0x210 [ 327.195212][T14674] do_syscall_64+0xcd/0x4e0 [ 327.195228][T14674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.195239][T14674] RIP: 0033:0x7ff18c18ec29 [ 327.195249][T14674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.195259][T14674] RSP: 002b:00007ff18cfe2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.195269][T14674] RAX: ffffffffffffffda RBX: 00007ff18c3d5fa0 RCX: 00007ff18c18ec29 [ 327.195276][T14674] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 327.195282][T14674] RBP: 00007ff18cfe2090 R08: 0000000000000000 R09: 0000000000000000 [ 327.195288][T14674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.195294][T14674] R13: 00007ff18c3d6038 R14: 00007ff18c3d5fa0 R15: 00007ffef43d72f8 [ 327.195308][T14674] [ 327.352891][ T5976] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 327.613918][T14710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2880'. [ 327.637769][T14705] /dev/sr0: Can't open blockdev [ 327.647451][T14705] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 328.142377][T14735] lo speed is unknown, defaulting to 1000 [ 328.144398][T14735] lo speed is unknown, defaulting to 1000 [ 328.147335][T14735] lo speed is unknown, defaulting to 1000 [ 328.158195][T14735] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 328.170883][T14735] lo speed is unknown, defaulting to 1000 [ 328.175136][T14735] lo speed is unknown, defaulting to 1000 [ 328.177609][T14735] lo speed is unknown, defaulting to 1000 [ 328.180162][T14735] lo speed is unknown, defaulting to 1000 [ 328.182911][T14735] lo speed is unknown, defaulting to 1000 [ 328.210299][T14737] overlayfs: failed to clone upperpath [ 328.253631][T14739] tipc: Enabling of bearer rejected, failed to enable media [ 328.366639][T14749] hfs: can't find a HFS filesystem on dev sr0 [ 328.450618][T14760] 9pnet_fd: Insufficient options for proto=fd [ 328.662013][T14773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2899'. [ 328.877695][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2904'. [ 329.402180][T14799] xt_l2tp: wrong L2TP version: 0 [ 329.509030][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 329.516483][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 329.526003][T14808] FAULT_INJECTION: forcing a failure. [ 329.526003][T14808] name failslab, interval 1, probability 0, space 0, times 0 [ 329.530346][T14808] CPU: 0 UID: 0 PID: 14808 Comm: syz.3.2912 Not tainted syzkaller #0 PREEMPT(full) [ 329.530370][T14808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 329.530380][T14808] Call Trace: [ 329.530387][T14808] [ 329.530394][T14808] dump_stack_lvl+0x16c/0x1f0 [ 329.530457][T14808] should_fail_ex+0x512/0x640 [ 329.530485][T14808] ? __kmalloc_noprof+0xbf/0x510 [ 329.530504][T14808] ? lsm_blob_alloc+0x68/0x90 [ 329.530521][T14808] should_failslab+0xc2/0x120 [ 329.530541][T14808] __kmalloc_noprof+0xd2/0x510 [ 329.530557][T14808] ? __pfx_perf_event_init_task+0x10/0x10 [ 329.530580][T14808] ? audit_alloc+0xa2/0x7b0 [ 329.530605][T14808] lsm_blob_alloc+0x68/0x90 [ 329.530624][T14808] security_task_alloc+0x2d/0x260 [ 329.530652][T14808] copy_process+0x2205/0x7690 [ 329.530686][T14808] ? __pfx_copy_process+0x10/0x10 [ 329.530718][T14808] ? lockdep_init_map_type+0x5c/0x280 [ 329.530736][T14808] ? lockdep_init_map_type+0x5c/0x280 [ 329.530753][T14808] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 329.530777][T14808] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 329.530803][T14808] vhost_task_create+0x1d2/0x2e0 [ 329.530822][T14808] ? __pfx_vhost_task_create+0x10/0x10 [ 329.530849][T14808] ? __pfx_vhost_task_fn+0x10/0x10 [ 329.530878][T14808] kvm_mmu_post_init_vm+0x1b7/0x380 [ 329.530899][T14808] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 329.530924][T14808] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 329.530951][T14808] kvm_vcpu_ioctl+0x5eb/0x1690 [ 329.530977][T14808] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 329.531001][T14808] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 329.531024][T14808] ? do_vfs_ioctl+0x128/0x14f0 [ 329.531051][T14808] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 329.531102][T14808] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 329.531137][T14808] ? hook_file_ioctl_common+0x145/0x410 [ 329.531160][T14808] ? selinux_file_ioctl+0x180/0x270 [ 329.531183][T14808] ? selinux_file_ioctl+0xb4/0x270 [ 329.531206][T14808] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 329.531230][T14808] __x64_sys_ioctl+0x18e/0x210 [ 329.531257][T14808] do_syscall_64+0xcd/0x4e0 [ 329.531290][T14808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.531308][T14808] RIP: 0033:0x7ff18c18ec29 [ 329.531324][T14808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.531339][T14808] RSP: 002b:00007ff18cfe2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.531357][T14808] RAX: ffffffffffffffda RBX: 00007ff18c3d5fa0 RCX: 00007ff18c18ec29 [ 329.531369][T14808] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 329.531379][T14808] RBP: 00007ff18cfe2090 R08: 0000000000000000 R09: 0000000000000000 [ 329.531390][T14808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.531399][T14808] R13: 00007ff18c3d6038 R14: 00007ff18c3d5fa0 R15: 00007ffef43d72f8 [ 329.531422][T14808] [ 329.648186][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.710945][ T40] kauditd_printk_skb: 245 callbacks suppressed [ 329.710963][ T40] audit: type=1326 audit(1758545012.848:35276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14817 comm="syz.4.2916" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99f3f8ec29 code=0x0 [ 329.735006][ T40] audit: type=1400 audit(1758545012.878:35277): avc: denied { read write } for pid=13693 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 329.744549][ T40] audit: type=1400 audit(1758545012.878:35278): avc: denied { open } for pid=13693 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 329.755109][ T40] audit: type=1400 audit(1758545012.878:35279): avc: denied { ioctl } for pid=13693 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 329.761851][T14820] fuse: Unknown parameter 'grou00000000000000000000' [ 329.807640][ T40] audit: type=1400 audit(1758545012.948:35280): avc: denied { write } for pid=14821 comm="syz.3.2918" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 329.821305][ T40] audit: type=1400 audit(1758545012.958:35281): avc: denied { module_request } for pid=14823 comm="syz.1.2919" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 329.831280][ T40] audit: type=1400 audit(1758545012.958:35282): avc: denied { set_context_mgr } for pid=14821 comm="syz.3.2918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 329.849904][ T40] audit: type=1400 audit(1758545012.988:35283): avc: denied { read write } for pid=14823 comm="syz.1.2919" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 329.858447][ T40] audit: type=1400 audit(1758545012.988:35284): avc: denied { open } for pid=14823 comm="syz.1.2919" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 329.868585][ T40] audit: type=1400 audit(1758545012.988:35285): avc: denied { ioctl } for pid=14823 comm="syz.1.2919" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 329.986918][T14835] 9pnet_fd: Insufficient options for proto=fd [ 330.026381][T14840] Failed to get privilege flags for destination (handle=0x2:0x0) [ 330.071219][T14850] fuse: Unknown parameter 'grou00000000000000000000' [ 330.169544][T14858] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 330.263609][T14858] block nbd1: NBD_DISCONNECT [ 330.265892][T14858] block nbd1: Disconnected due to user request. [ 330.268667][T14858] block nbd1: shutting down sockets [ 330.445046][T14882] nbd_handle_cmd: 2 callbacks suppressed [ 330.445060][T14882] block nbd1: Attempted send on invalid socket [ 330.448826][T14882] blk_print_req_error: 2 callbacks suppressed [ 330.448838][T14882] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.453933][T14882] block nbd1: Attempted send on invalid socket [ 330.455957][T14882] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.458787][T14882] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 330.461938][T14882] block nbd1: Attempted send on invalid socket [ 330.465959][T14882] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.468842][T14882] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 330.472437][T14882] block nbd1: Attempted send on invalid socket [ 330.474524][T14882] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.477511][T14882] block nbd1: Attempted send on invalid socket [ 330.479416][T14882] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.482463][T14882] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 330.485979][T14882] block nbd1: Attempted send on invalid socket [ 330.487889][T14882] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.490764][T14882] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 330.494401][T14882] block nbd1: Attempted send on invalid socket [ 330.496652][T14882] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.499646][T14882] block nbd1: Attempted send on invalid socket [ 330.501570][T14882] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.504695][T14882] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 330.507753][T14882] block nbd1: Attempted send on invalid socket [ 330.510124][T14882] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.513406][T14882] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 330.516599][T14882] block nbd1: Attempted send on invalid socket [ 330.518464][T14882] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.521369][T14882] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 330.525231][T14882] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 330.528514][T14882] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 330.739298][T14893] tls_set_device_offload: netdev not found [ 331.201174][T14915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2948'. [ 331.313877][T14917] netlink: 'syz.2.2949': attribute type 10 has an invalid length. [ 331.362371][ T6051] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 331.514487][ T6051] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 331.522160][ T6051] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 331.526017][ T6051] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.529334][ T6051] usb 8-1: Product: syz [ 331.531130][ T6051] usb 8-1: Manufacturer: syz [ 331.534620][ T6051] usb 8-1: SerialNumber: syz [ 331.551981][ T6051] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 331.837129][ T6051] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 331.849708][ T6051] usb 8-1: USB disconnect, device number 30 [ 332.619875][T14917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.626081][T14917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.632453][T14917] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 332.667070][T14942] fuse: Unknown parameter 'group_i00000000000000000000' [ 332.676604][T14944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'. [ 332.749916][T14954] overlayfs: failed to clone upperpath [ 332.932407][ T24] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 332.952186][T14976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 333.019251][T14984] overlayfs: failed to clone upperpath [ 333.094290][ T24] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 333.104991][ T24] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 333.110062][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.114092][ T24] usb 6-1: Product: syz [ 333.116078][ T24] usb 6-1: Manufacturer: syz [ 333.118152][ T24] usb 6-1: SerialNumber: syz [ 333.126732][ T24] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 333.387852][ T24] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 333.396470][ T24] usb 6-1: USB disconnect, device number 34 [ 333.422495][T15007] fuse: Unknown parameter 'group_i00000000000000000000' [ 333.450253][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2982'. [ 333.450254][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2982'. [ 333.450268][T15009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2982'. [ 333.454449][T15011] netlink: 'syz.4.2982': attribute type 63 has an invalid length. [ 333.454449][T15010] netlink: 'syz.4.2982': attribute type 63 has an invalid length. [ 333.491022][T15013] overlayfs: failed to clone upperpath [ 333.526178][T15015] overlayfs: failed to clone upperpath [ 333.592732][ T841] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 333.752332][ T841] usb 8-1: Using ep0 maxpacket: 16 [ 333.757479][ T841] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 333.761191][ T841] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 333.765607][ T841] usb 8-1: Product: syz [ 333.767009][ T841] usb 8-1: Manufacturer: syz [ 333.768484][ T841] usb 8-1: SerialNumber: syz [ 333.771962][ T841] usb 8-1: config 0 descriptor?? [ 333.919219][T15041] QAT: Stopping all acceleration devices. [ 333.959231][ T1339] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 333.963370][ T1339] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 333.964218][T15044] UHID_CREATE from different security context by process 549 (syz.2.2996), this is not allowed. [ 333.967486][ T1339] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 333.975205][ T1339] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 333.981442][ T6051] usb 8-1: USB disconnect, device number 31 [ 333.981648][ T1339] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 333.987122][ T1339] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 333.991351][ T1339] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 333.995392][ T1339] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 333.998432][ T1339] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 334.002379][ T1339] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 334.010886][ T1339] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.03 Device [syz1] on syz1 [ 334.056941][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.063896][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.067472][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.072077][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.075764][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.101197][T15047] vxcan1 speed is unknown, defaulting to 1000 [ 334.199092][T15047] lo speed is unknown, defaulting to 1000 [ 334.309926][T15047] chnl_net:caif_netlink_parms(): no params data found [ 334.398681][T15047] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.401257][T15047] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.403902][T15047] bridge_slave_0: entered allmulticast mode [ 334.406606][T15047] bridge_slave_0: entered promiscuous mode [ 334.409696][T15047] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.412029][T15047] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.414487][T15047] bridge_slave_1: entered allmulticast mode [ 334.417202][T15047] bridge_slave_1: entered promiscuous mode [ 334.457601][T15047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.464285][T15047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.525423][T15047] team0: Port device team_slave_0 added [ 334.530462][T15047] team0: Port device team_slave_1 added [ 334.592167][T15047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.596605][T15047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.607281][T15047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.613257][T15047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.616019][T15047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.626282][T15047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.671421][T15047] hsr_slave_0: entered promiscuous mode [ 334.673751][T15047] hsr_slave_1: entered promiscuous mode [ 334.675777][T15047] debugfs: 'hsr0' already exists in 'hsr' [ 334.677523][T15047] Cannot create hsr debugfs directory [ 334.790285][ T40] kauditd_printk_skb: 233 callbacks suppressed [ 334.790338][ T40] audit: type=1400 audit(1758545017.928:35519): avc: denied { read write } for pid=15069 comm="syz.1.3001" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 334.799603][ T40] audit: type=1400 audit(1758545017.928:35520): avc: denied { open } for pid=15069 comm="syz.1.3001" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 334.806942][ T40] audit: type=1400 audit(1758545017.928:35521): avc: denied { mounton } for pid=15069 comm="syz.1.3001" path="/112/file0" dev="tmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 334.814142][ T40] audit: type=1400 audit(1758545017.928:35522): avc: denied { mount } for pid=15069 comm="syz.1.3001" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 334.948084][ T40] audit: type=1400 audit(1758545018.088:35523): avc: denied { open } for pid=15069 comm="syz.1.3001" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 334.960618][ T40] audit: type=1400 audit(1758545018.098:35524): avc: denied { unmount } for pid=13693 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 334.986570][ T40] audit: type=1400 audit(1758545018.128:35525): avc: denied { read write } for pid=15073 comm="syz.1.3002" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 334.996460][ T40] audit: type=1400 audit(1758545018.128:35526): avc: denied { open } for pid=15073 comm="syz.1.3002" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.005565][ T40] audit: type=1400 audit(1758545018.128:35527): avc: denied { ioctl } for pid=15073 comm="syz.1.3002" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 335.181699][T15047] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 335.188442][T15047] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.194370][ T40] audit: type=1400 audit(1758545018.338:35528): avc: denied { allowed } for pid=15075 comm="syz.2.3003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 335.194503][T15047] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 335.208016][T15047] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 335.225441][ T1339] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 335.267650][T15047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.279076][T15047] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.285995][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.288211][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.295178][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.297589][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.388041][ T1339] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 335.394334][ T1339] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 335.397747][ T1339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.400676][ T1339] usb 6-1: Product: syz [ 335.402013][ T1339] usb 6-1: Manufacturer: syz [ 335.403633][ T1339] usb 6-1: SerialNumber: syz [ 335.409428][ T1339] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 335.464978][T15047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.646543][T15047] veth0_vlan: entered promiscuous mode [ 335.652518][T15047] veth1_vlan: entered promiscuous mode [ 335.671584][T15047] veth0_macvtap: entered promiscuous mode [ 335.678449][T15047] veth1_macvtap: entered promiscuous mode [ 335.692069][T15047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.700404][T15047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.707680][ T1339] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 335.708636][ T92] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.716190][ T1339] usb 6-1: USB disconnect, device number 35 [ 335.720446][ T92] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.733279][ T92] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.736505][ T92] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.803539][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.806701][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.813048][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.826392][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.843546][T15114] fuse: Bad value for 'user_id' [ 335.845623][T15114] fuse: Bad value for 'user_id' [ 335.939931][T15118] netlink: 'syz.4.2993': attribute type 29 has an invalid length. [ 336.011077][T15121] input: syz1 as /devices/virtual/input/input22 [ 336.087444][T15123] __nla_validate_parse: 3 callbacks suppressed [ 336.087460][T15123] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3014'. [ 336.153163][ T5976] Bluetooth: hci0: command tx timeout [ 336.474496][T15141] netlink: 'syz.2.3021': attribute type 10 has an invalid length. [ 336.484228][T15141] team0: Port device dummy0 added [ 336.488253][T15141] netlink: 'syz.2.3021': attribute type 10 has an invalid length. [ 336.498599][T15141] team0: Port device dummy0 removed [ 336.504126][T15141] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 336.529291][T15141] vxcan1 speed is unknown, defaulting to 1000 [ 336.632334][ T6050] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 336.653654][T15141] lo speed is unknown, defaulting to 1000 [ 336.792996][ T6050] usb 6-1: Using ep0 maxpacket: 16 [ 336.798309][ T6050] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 336.801753][ T6050] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 336.804645][ T6050] usb 6-1: Product: syz [ 336.806007][ T6050] usb 6-1: Manufacturer: syz [ 336.807502][ T6050] usb 6-1: SerialNumber: syz [ 336.810496][ T6050] usb 6-1: config 0 descriptor?? [ 336.959554][T15154] SELinux: policydb string length 14080 does not match expected length 8 [ 336.963810][T15154] SELinux: failed to load policy [ 337.019825][ T60] usb 6-1: USB disconnect, device number 36 [ 337.620289][T15199] kAFS: unparsable volume name [ 337.672147][T15202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3043'. [ 337.806692][T15204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3044'. [ 338.014232][T15222] comedi comedi4: bad chanlist[0]=0x00400008 chan=8 range length=2 [ 338.234569][ T5976] Bluetooth: hci0: command tx timeout [ 338.242383][T15235] fuse: Bad value for 'fd' [ 338.291288][T15242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.480961][T15252] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3061'. [ 338.730260][T15255] macvlan3: entered promiscuous mode [ 338.732062][T15255] macvlan3: entered allmulticast mode [ 338.734304][T15255] veth1_vlan: entered allmulticast mode [ 338.737880][T15255] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 338.854101][T15264] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 338.895514][T15266] fuse: Bad value for 'fd' [ 339.038570][T15273] binder: 15271:15273 ioctl 4b6a 2000000002c0 returned -22 [ 339.094478][T15273] binder: 15271:15273 ioctl c0306201 200000004a40 returned -14 [ 339.197285][ T840] IPVS: starting estimator thread 0... [ 339.292443][T15285] IPVS: using max 41 ests per chain, 98400 per kthread [ 339.389614][T15293] Failed to get privilege flags for destination (handle=0x2:0x0) [ 339.477081][T15298] nbd_handle_cmd: 2 callbacks suppressed [ 339.477094][T15298] block nbd1: Attempted send on invalid socket [ 339.483730][T15298] blk_print_req_error: 2 callbacks suppressed [ 339.483745][T15298] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.490821][T15298] block nbd1: Attempted send on invalid socket [ 339.492851][T15298] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.495722][T15298] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 339.498698][T15298] block nbd1: Attempted send on invalid socket [ 339.500572][T15298] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.503448][T15298] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 339.506684][T15298] block nbd1: Attempted send on invalid socket [ 339.508584][T15298] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.511618][T15298] block nbd1: Attempted send on invalid socket [ 339.513822][T15298] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.516646][T15298] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 339.520010][T15298] block nbd1: Attempted send on invalid socket [ 339.521997][T15298] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.529333][T15298] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 339.535724][T15298] block nbd1: Attempted send on invalid socket [ 339.538485][T15298] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.542156][T15298] block nbd1: Attempted send on invalid socket [ 339.544781][T15298] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.548756][T15298] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 339.552720][T15298] block nbd1: Attempted send on invalid socket [ 339.555092][T15298] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.558648][T15298] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 339.562554][T15298] block nbd1: Attempted send on invalid socket [ 339.565318][T15298] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 339.565563][T15300] kvm: emulating exchange as write [ 339.568735][T15298] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 339.579134][T15298] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 339.583195][T15298] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 339.666897][T15312] comedi comedi4: bad chanlist[0]=0x00400008 chan=8 range length=2 [ 339.709569][T15311] FAULT_INJECTION: forcing a failure. [ 339.709569][T15311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 339.713871][T15311] CPU: 0 UID: 0 PID: 15311 Comm: syz.4.3083 Not tainted syzkaller #0 PREEMPT(full) [ 339.713886][T15311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 339.713892][T15311] Call Trace: [ 339.713897][T15311] [ 339.713901][T15311] dump_stack_lvl+0x16c/0x1f0 [ 339.713934][T15311] should_fail_ex+0x512/0x640 [ 339.713955][T15311] should_fail_alloc_page+0xe7/0x130 [ 339.713970][T15311] prepare_alloc_pages+0x3c2/0x610 [ 339.713987][T15311] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 339.714001][T15311] ? rcu_is_watching+0x12/0xc0 [ 339.714015][T15311] ? trace_mm_page_alloc+0x11f/0x1a0 [ 339.714031][T15311] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 339.714044][T15311] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 339.714057][T15311] ? is_bpf_text_address+0x8a/0x1a0 [ 339.714070][T15311] ? bpf_ksym_find+0x127/0x1c0 [ 339.714086][T15311] ? is_bpf_text_address+0x94/0x1a0 [ 339.714098][T15311] ? kernel_text_address+0x8d/0x100 [ 339.714111][T15311] ? __kernel_text_address+0xd/0x40 [ 339.714123][T15311] ? unwind_get_return_address+0x59/0xa0 [ 339.714140][T15311] alloc_pages_bulk_noprof+0x71c/0x1410 [ 339.714152][T15311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 339.714166][T15311] ? policy_nodemask+0xea/0x4e0 [ 339.714180][T15311] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 339.714192][T15311] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 339.714211][T15311] kasan_populate_vmalloc+0x112/0x2d0 [ 339.714222][T15311] ? alloc_vmap_area+0x8b5/0x29c0 [ 339.714238][T15311] alloc_vmap_area+0x960/0x29c0 [ 339.714258][T15311] ? __pfx_alloc_vmap_area+0x10/0x10 [ 339.714276][T15311] __get_vm_area_node+0x1ca/0x330 [ 339.714294][T15311] __vmalloc_node_range_noprof+0x271/0x14b0 [ 339.714311][T15311] ? vhost_task_create+0x1d2/0x2e0 [ 339.714322][T15311] ? local_lock_release+0x99/0x140 [ 339.714339][T15311] ? vhost_task_create+0x1d2/0x2e0 [ 339.714350][T15311] ? rcu_read_unlock+0x17/0x60 [ 339.714366][T15311] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 339.714387][T15311] ? vhost_task_create+0x1d2/0x2e0 [ 339.714398][T15311] __vmalloc_node_noprof+0xad/0xf0 [ 339.714413][T15311] ? vhost_task_create+0x1d2/0x2e0 [ 339.714426][T15311] copy_process+0x2c70/0x7690 [ 339.714447][T15311] ? __pfx_copy_process+0x10/0x10 [ 339.714464][T15311] ? lockdep_init_map_type+0x5c/0x280 [ 339.714476][T15311] ? lockdep_init_map_type+0x5c/0x280 [ 339.714486][T15311] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 339.714502][T15311] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 339.714520][T15311] vhost_task_create+0x1d2/0x2e0 [ 339.714530][T15311] ? __pfx_vhost_task_create+0x10/0x10 [ 339.714546][T15311] ? __pfx_vhost_task_fn+0x10/0x10 [ 339.714563][T15311] kvm_mmu_post_init_vm+0x1b7/0x380 [ 339.714576][T15311] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 339.714593][T15311] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 339.714614][T15311] kvm_vcpu_ioctl+0x5eb/0x1690 [ 339.714630][T15311] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 339.714645][T15311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 339.714658][T15311] ? do_vfs_ioctl+0x128/0x14f0 [ 339.714675][T15311] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 339.714692][T15311] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 339.714714][T15311] ? hook_file_ioctl_common+0x145/0x410 [ 339.714729][T15311] ? selinux_file_ioctl+0x180/0x270 [ 339.714744][T15311] ? selinux_file_ioctl+0xb4/0x270 [ 339.714760][T15311] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 339.714775][T15311] __x64_sys_ioctl+0x18e/0x210 [ 339.714793][T15311] do_syscall_64+0xcd/0x4e0 [ 339.714814][T15311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.714825][T15311] RIP: 0033:0x7f0ab6d8ec29 [ 339.714833][T15311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.714844][T15311] RSP: 002b:00007f0ab7c94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.714855][T15311] RAX: ffffffffffffffda RBX: 00007f0ab6fd5fa0 RCX: 00007f0ab6d8ec29 [ 339.714862][T15311] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 339.714868][T15311] RBP: 00007f0ab7c94090 R08: 0000000000000000 R09: 0000000000000000 [ 339.714874][T15311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.714880][T15311] R13: 00007f0ab6fd6038 R14: 00007f0ab6fd5fa0 R15: 00007ffdba665018 [ 339.714893][T15311] [ 339.715283][T15311] syz.4.3083: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 339.813579][T15272] binder: 15271:15272 ioctl c0306201 200000000380 returned -14 [ 339.816398][T15311] ,cpuset= [ 339.849764][ T40] kauditd_printk_skb: 294 callbacks suppressed [ 339.849780][ T40] audit: type=1326 audit(1758545022.988:35823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15320 comm="syz.3.3087" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff18c18ec29 code=0x0 [ 339.852289][T15311] / [ 339.894583][ C1] hpet: Lost 2 RTC interrupts [ 339.898173][T15311] ,mems_allowed=0-1 [ 339.899011][ T40] audit: type=1400 audit(1758545023.038:35824): avc: denied { open } for pid=15318 comm="syz.2.3086" path="/dev/ptyq8" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 339.900041][T15311] CPU: 0 UID: 0 PID: 15311 Comm: syz.4.3083 Not tainted syzkaller #0 PREEMPT(full) [ 339.900056][T15311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 339.900063][T15311] Call Trace: [ 339.900068][T15311] [ 339.900073][T15311] dump_stack_lvl+0x16c/0x1f0 [ 339.900091][T15311] warn_alloc+0x248/0x3a0 [ 339.900103][T15311] ? __pfx_warn_alloc+0x10/0x10 [ 339.900116][T15311] ? kfree+0x2b4/0x4d0 [ 339.900135][T15311] ? __get_vm_area_node+0x208/0x330 [ 339.900153][T15311] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 339.900170][T15311] ? local_lock_release+0x99/0x140 [ 339.900187][T15311] ? vhost_task_create+0x1d2/0x2e0 [ 339.900199][T15311] ? rcu_read_unlock+0x17/0x60 [ 339.900214][T15311] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 339.900235][T15311] ? vhost_task_create+0x1d2/0x2e0 [ 339.900246][T15311] __vmalloc_node_noprof+0xad/0xf0 [ 339.900262][T15311] ? vhost_task_create+0x1d2/0x2e0 [ 339.900274][T15311] copy_process+0x2c70/0x7690 [ 339.900296][T15311] ? __pfx_copy_process+0x10/0x10 [ 339.900313][T15311] ? lockdep_init_map_type+0x5c/0x280 [ 339.900325][T15311] ? lockdep_init_map_type+0x5c/0x280 [ 339.900335][T15311] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 339.900351][T15311] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 339.900370][T15311] vhost_task_create+0x1d2/0x2e0 [ 339.900381][T15311] ? __pfx_vhost_task_create+0x10/0x10 [ 339.900396][T15311] ? __pfx_vhost_task_fn+0x10/0x10 [ 339.900413][T15311] kvm_mmu_post_init_vm+0x1b7/0x380 [ 339.900427][T15311] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 339.900444][T15311] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 339.900461][T15311] kvm_vcpu_ioctl+0x5eb/0x1690 [ 339.900477][T15311] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 339.900491][T15311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 339.900505][T15311] ? do_vfs_ioctl+0x128/0x14f0 [ 339.900523][T15311] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 339.900539][T15311] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 339.900561][T15311] ? hook_file_ioctl_common+0x145/0x410 [ 339.900576][T15311] ? selinux_file_ioctl+0x180/0x270 [ 339.900592][T15311] ? selinux_file_ioctl+0xb4/0x270 [ 339.900608][T15311] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 339.900623][T15311] __x64_sys_ioctl+0x18e/0x210 [ 339.900640][T15311] do_syscall_64+0xcd/0x4e0 [ 339.900656][T15311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.900667][T15311] RIP: 0033:0x7f0ab6d8ec29 [ 339.900676][T15311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.900687][T15311] RSP: 002b:00007f0ab7c94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.900697][T15311] RAX: ffffffffffffffda RBX: 00007f0ab6fd5fa0 RCX: 00007f0ab6d8ec29 [ 339.900707][T15311] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 339.900714][T15311] RBP: 00007f0ab7c94090 R08: 0000000000000000 R09: 0000000000000000 [ 339.900720][T15311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.900726][T15311] R13: 00007f0ab6fd6038 R14: 00007f0ab6fd5fa0 R15: 00007ffdba665018 [ 339.900739][T15311] [ 339.900743][T15311] Mem-Info: [ 339.918245][ T40] audit: type=1400 audit(1758545023.058:35825): avc: denied { unmount } for pid=12179 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 339.921309][T15311] active_anon:32254 inactive_anon:0 isolated_anon:0 [ 339.921309][T15311] active_file:5358 inactive_file:32534 isolated_file:0 [ 339.921309][T15311] unevictable:1768 dirty:288 writeback:0 [ 339.921309][T15311] slab_reclaimable:9116 slab_unreclaimable:79820 [ 339.921309][T15311] mapped:27580 shmem:18783 pagetables:1551 [ 339.921309][T15311] sec_pagetables:318 bounce:0 [ 339.921309][T15311] kernel_misc_reclaimable:0 [ 339.921309][T15311] free:430230 free_pcp:24783 free_cma:0 [ 340.037676][T15311] Node 0 active_anon:129016kB inactive_anon:0kB active_file:16224kB inactive_file:129940kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:110320kB dirty:1148kB writeback:0kB shmem:71596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13936kB pagetables:5992kB sec_pagetables:1272kB all_unreclaimable? no Balloon:0kB [ 340.049868][T15311] Node 1 active_anon:0kB inactive_anon:0kB active_file:5208kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 340.062132][T15311] Node 0 DMA free:14216kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:768kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:260kB local_pcp:64kB free_cma:0kB [ 340.072669][T15311] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 340.074419][T15311] Node 0 DMA32 free:107924kB boost:18432kB min:45948kB low:52824kB high:59700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:129016kB inactive_anon:0kB active_file:15456kB inactive_file:129940kB unevictable:3536kB writepending:1148kB present:2080628kB managed:1263420kB mlocked:0kB bounce:0kB free_pcp:86500kB local_pcp:19924kB free_cma:0kB [ 340.085415][T15311] lowmem_reserve[]: 0 0 0 0 0 [ 340.086063][T15326] kvm: Disabled LAPIC found during irq injection [ 340.087247][T15311] Node 1 Normal free:1598504kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:5208kB inactive_file:196kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:12508kB local_pcp:0kB free_cma:0kB [ 340.101643][T15311] lowmem_reserve[]: 0 0 0 0 0 [ 340.104226][T15311] Node 0 DMA: 18*4kB (UM) 18*8kB (UM) 11*16kB (UM) 14*32kB (UM) 11*64kB (UM) 9*128kB (UM) 7*256kB (UM) 3*512kB (UM) 0*1024kB 2*2048kB (U) 1*4096kB (U) = 14216kB [ 340.110682][T15311] Node 0 DMA32: 884*4kB (UME) 252*8kB (UME) 457*16kB (UME) 473*32kB (UM) 71*64kB (UME) 29*128kB (UME) 55*256kB (UME) 10*512kB (UM) 7*1024kB (UM) 10*2048kB (UM) 6*4096kB (UM) = 107680kB [ 340.116509][T15311] Node 1 Normal: 81*4kB (UME) 103*8kB (UME) 53*16kB (UME) 143*32kB (UME) 112*64kB (UME) 55*128kB (UME) 15*256kB (UM) 12*512kB (UME) 13*1024kB (UME) 9*2048kB (UM) 375*4096kB (UM) = 1598508kB [ 340.123081][T15311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.126100][T15311] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 340.128936][T15311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.131793][T15311] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 340.135865][T15311] 56671 total pagecache pages [ 340.137348][T15311] 0 pages in swap cache [ 340.138646][T15311] Free swap = 124996kB [ 340.139998][T15311] Total swap = 124996kB [ 340.141264][T15311] 1048443 pages RAM [ 340.142574][T15311] 0 pages HighMem/MovableOnly [ 340.144065][T15311] 283275 pages reserved [ 340.145313][T15311] 0 pages cma reserved [ 340.244868][ T40] audit: type=1400 audit(1758545023.388:35826): avc: denied { map_read map_write } for pid=15328 comm="syz.4.3089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 340.252987][ T40] audit: type=1400 audit(1758545023.388:35827): avc: denied { perfmon } for pid=15328 comm="syz.4.3089" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 340.259703][ T40] audit: type=1400 audit(1758545023.388:35828): avc: denied { prog_run } for pid=15328 comm="syz.4.3089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 340.266271][ T40] audit: type=1400 audit(1758545023.398:35829): avc: denied { mount } for pid=15328 comm="syz.4.3089" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 340.299395][ T40] audit: type=1400 audit(1758545023.438:35830): avc: denied { bind } for pid=15330 comm="syz.2.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 340.305692][ T40] audit: type=1400 audit(1758545023.438:35831): avc: denied { write } for pid=15330 comm="syz.2.3090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 340.325040][ T5976] Bluetooth: hci0: command tx timeout [ 340.567283][T15341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3093'. [ 340.658619][T15345] binder: 15344:15345 ioctl c0306201 200000000540 returned -22 [ 340.719752][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3095'. [ 340.728092][T15352] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 340.740365][T15350] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3095'. [ 340.871069][T15360] netlink: 'syz.3.3099': attribute type 6 has an invalid length. [ 340.873547][T15360] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3099'. [ 340.877161][T15360] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.880974][T15360] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.891440][T15357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15357 comm=syz.2.3098 [ 342.127699][T15464] netlink: zone id is out of range [ 342.136407][T15464] netlink: zone id is out of range [ 342.138548][T15464] netlink: zone id is out of range [ 342.140654][T15464] netlink: zone id is out of range [ 342.142222][T15464] netlink: zone id is out of range [ 342.144399][T15464] netlink: zone id is out of range [ 342.147086][T15464] netlink: del zone limit has 4 unknown bytes [ 342.150229][T15464] comedi comedi4: bad chanlist[0]=0x00400008 chan=8 range length=2 [ 342.293100][ T1339] e1000 0000:00:06.0 eth0: Reset adapter [ 342.343122][T15474] FAULT_INJECTION: forcing a failure. [ 342.343122][T15474] name failslab, interval 1, probability 0, space 0, times 0 [ 342.348323][T15474] CPU: 1 UID: 0 PID: 15474 Comm: syz.3.3114 Not tainted syzkaller #0 PREEMPT(full) [ 342.348339][T15474] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 342.348346][T15474] Call Trace: [ 342.348350][T15474] [ 342.348355][T15474] dump_stack_lvl+0x16c/0x1f0 [ 342.348390][T15474] should_fail_ex+0x512/0x640 [ 342.348408][T15474] ? __kmalloc_node_noprof+0xc5/0x500 [ 342.348421][T15474] should_failslab+0xc2/0x120 [ 342.348440][T15474] __kmalloc_node_noprof+0xd8/0x500 [ 342.348452][T15474] ? __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 342.348471][T15474] __vmalloc_node_range_noprof+0x3e5/0x14b0 [ 342.348487][T15474] ? local_lock_release+0x99/0x140 [ 342.348504][T15474] ? vhost_task_create+0x1d2/0x2e0 [ 342.348516][T15474] ? rcu_read_unlock+0x17/0x60 [ 342.348532][T15474] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 342.348553][T15474] ? vhost_task_create+0x1d2/0x2e0 [ 342.348563][T15474] __vmalloc_node_noprof+0xad/0xf0 [ 342.348579][T15474] ? vhost_task_create+0x1d2/0x2e0 [ 342.348592][T15474] copy_process+0x2c70/0x7690 [ 342.348614][T15474] ? __pfx_copy_process+0x10/0x10 [ 342.348631][T15474] ? lockdep_init_map_type+0x5c/0x280 [ 342.348643][T15474] ? lockdep_init_map_type+0x5c/0x280 [ 342.348654][T15474] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 342.348669][T15474] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 342.348689][T15474] vhost_task_create+0x1d2/0x2e0 [ 342.348700][T15474] ? __pfx_vhost_task_create+0x10/0x10 [ 342.348716][T15474] ? __pfx_vhost_task_fn+0x10/0x10 [ 342.348733][T15474] kvm_mmu_post_init_vm+0x1b7/0x380 [ 342.348747][T15474] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 342.348764][T15474] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 342.348782][T15474] kvm_vcpu_ioctl+0x5eb/0x1690 [ 342.348798][T15474] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 342.348813][T15474] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 342.348827][T15474] ? do_vfs_ioctl+0x128/0x14f0 [ 342.348845][T15474] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 342.348862][T15474] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 342.348884][T15474] ? hook_file_ioctl_common+0x145/0x410 [ 342.348899][T15474] ? selinux_file_ioctl+0x180/0x270 [ 342.348914][T15474] ? selinux_file_ioctl+0xb4/0x270 [ 342.348931][T15474] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 342.348946][T15474] __x64_sys_ioctl+0x18e/0x210 [ 342.348964][T15474] do_syscall_64+0xcd/0x4e0 [ 342.348984][T15474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.348995][T15474] RIP: 0033:0x7ff18c18ec29 [ 342.349004][T15474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.349015][T15474] RSP: 002b:00007ff18cfe2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.349025][T15474] RAX: ffffffffffffffda RBX: 00007ff18c3d5fa0 RCX: 00007ff18c18ec29 [ 342.349032][T15474] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 342.349039][T15474] RBP: 00007ff18cfe2090 R08: 0000000000000000 R09: 0000000000000000 [ 342.349045][T15474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.349051][T15474] R13: 00007ff18c3d6038 R14: 00007ff18c3d5fa0 R15: 00007ffef43d72f8 [ 342.349065][T15474] [ 342.479471][ T5976] Bluetooth: hci0: command tx timeout [ 342.505333][T15478] sctp: [Deprecated]: syz.1.3116 (pid 15478) Use of int in maxseg socket option. [ 342.505333][T15478] Use struct sctp_assoc_value instead [ 342.552647][ T1339] e1000 0000:00:06.0 eth0: Reset adapter [ 342.661535][T15485] block nbd1: shutting down sockets [ 344.793262][ T6027] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 352.357594][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 352.357608][ T40] audit: type=1400 audit(1758545035.498:35946): avc: denied { create } for pid=15528 comm="syz.4.3120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 352.367833][ T40] audit: type=1400 audit(1758545035.498:35947): avc: denied { write } for pid=15528 comm="syz.4.3120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 352.376189][ T40] audit: type=1400 audit(1758545035.498:35948): avc: denied { read } for pid=15536 comm="syz.3.3123" dev="nsfs" ino=4026532906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 352.384166][ T40] audit: type=1400 audit(1758545035.498:35949): avc: denied { open } for pid=15536 comm="syz.3.3123" path="net:[4026532906]" dev="nsfs" ino=4026532906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 352.396054][ T40] audit: type=1400 audit(1758545035.508:35950): avc: denied { bind } for pid=15530 comm="syz.1.3121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 352.411001][ T40] audit: type=1400 audit(1758545035.508:35951): avc: denied { name_bind } for pid=15530 comm="syz.1.3121" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 352.422494][ T40] audit: type=1400 audit(1758545035.508:35952): avc: denied { node_bind } for pid=15530 comm="syz.1.3121" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 352.430195][ T40] audit: type=1400 audit(1758545035.508:35953): avc: denied { getopt } for pid=15530 comm="syz.1.3121" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 352.430739][T15544] fuse: Unknown parameter 'roovmode' [ 352.441088][ T40] audit: type=1400 audit(1758545035.508:35954): avc: denied { connect } for pid=15530 comm="syz.1.3121" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 352.450577][ T40] audit: type=1400 audit(1758545035.508:35955): avc: denied { name_connect } for pid=15530 comm="syz.1.3121" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 352.596823][T15557] block nbd3: Unsupported socket: shutdown callout must be supported. [ 353.407256][T15570] IPv6: NLM_F_CREATE should be specified when creating new route [ 353.412180][T15570] tmpfs: Unknown parameter 'g?t>0x0000000000000000' [ 353.599111][T15587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3141'. [ 353.817806][T15596] syzkaller1: entered promiscuous mode [ 353.820011][T15596] syzkaller1: entered allmulticast mode [ 353.849248][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3147'. [ 354.016709][T15610] CUSE: unknown device info "" [ 354.018456][T15610] CUSE: zero length info key specified [ 354.160265][T15618] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3151'. [ 354.391646][T15622] sp0: Synchronizing with TNC [ 354.413797][T15621] [U] è`` [ 354.817023][T15645] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 354.818474][T15647] FAULT_INJECTION: forcing a failure. [ 354.818474][T15647] name failslab, interval 1, probability 0, space 0, times 0 [ 354.824146][T15647] CPU: 0 UID: 0 PID: 15647 Comm: syz.2.3163 Not tainted syzkaller #0 PREEMPT(full) [ 354.824162][T15647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 354.824169][T15647] Call Trace: [ 354.824172][T15647] [ 354.824177][T15647] dump_stack_lvl+0x16c/0x1f0 [ 354.824195][T15647] should_fail_ex+0x512/0x640 [ 354.824209][T15647] ? fs_reclaim_acquire+0xae/0x150 [ 354.824226][T15647] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 354.824243][T15647] should_failslab+0xc2/0x120 [ 354.824256][T15647] __kmalloc_noprof+0xd2/0x510 [ 354.824270][T15647] tomoyo_realpath_from_path+0xc2/0x6e0 [ 354.824288][T15647] ? tomoyo_profile+0x47/0x60 [ 354.824301][T15647] tomoyo_path_number_perm+0x245/0x580 [ 354.824314][T15647] ? tomoyo_path_number_perm+0x237/0x580 [ 354.824330][T15647] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 354.824345][T15647] ? find_held_lock+0x2b/0x80 [ 354.824371][T15647] ? find_held_lock+0x2b/0x80 [ 354.824384][T15647] ? hook_file_ioctl_common+0x145/0x410 [ 354.824399][T15647] ? __fget_files+0x20e/0x3c0 [ 354.824414][T15647] security_file_ioctl+0x9b/0x240 [ 354.824431][T15647] __x64_sys_ioctl+0xb7/0x210 [ 354.824450][T15647] do_syscall_64+0xcd/0x4e0 [ 354.824466][T15647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.824477][T15647] RIP: 0033:0x7feafcd8ec29 [ 354.824486][T15647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.824497][T15647] RSP: 002b:00007feafdbb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.824508][T15647] RAX: ffffffffffffffda RBX: 00007feafcfd5fa0 RCX: 00007feafcd8ec29 [ 354.824520][T15647] RDX: 00002000000007c0 RSI: 0000000080506409 RDI: 0000000000000003 [ 354.824526][T15647] RBP: 00007feafdbb6090 R08: 0000000000000000 R09: 0000000000000000 [ 354.824533][T15647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.824539][T15647] R13: 00007feafcfd6038 R14: 00007feafcfd5fa0 R15: 00007ffe98fac798 [ 354.824552][T15647] [ 354.824556][T15647] ERROR: Out of memory at tomoyo_realpath_from_path. [ 354.856974][T15649] overlay: Unknown parameter '/' [ 354.932648][T15649] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 355.021043][T15665] sp0: Synchronizing with TNC [ 355.025351][T15665] comedi comedi4: bad chanlist[0]=0x00400008 chan=8 range length=2 [ 355.027996][T15664] [U] è`` [ 355.128136][T15670] FAULT_INJECTION: forcing a failure. [ 355.128136][T15670] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 355.132098][T15670] CPU: 2 UID: 0 PID: 15670 Comm: syz.2.3171 Not tainted syzkaller #0 PREEMPT(full) [ 355.132113][T15670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 355.132120][T15670] Call Trace: [ 355.132126][T15670] [ 355.132130][T15670] dump_stack_lvl+0x16c/0x1f0 [ 355.132148][T15670] should_fail_ex+0x512/0x640 [ 355.132164][T15670] should_fail_alloc_page+0xe7/0x130 [ 355.132178][T15670] prepare_alloc_pages+0x3c2/0x610 [ 355.132194][T15670] ? rcu_is_watching+0x12/0xc0 [ 355.132210][T15670] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 355.132225][T15670] ? rcu_is_watching+0x12/0xc0 [ 355.132262][T15670] ? trace_mm_page_alloc+0x11f/0x1a0 [ 355.132285][T15670] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 355.132302][T15670] ? stack_trace_save+0x8e/0xc0 [ 355.132327][T15670] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 355.132345][T15670] ? stack_depot_save_flags+0x29/0x9c0 [ 355.132372][T15670] ? __kasan_slab_alloc+0x89/0x90 [ 355.132384][T15670] ? alloc_vmap_area+0xdcf/0x29c0 [ 355.132398][T15670] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 355.132414][T15670] ? __vmalloc_node_noprof+0xad/0xf0 [ 355.132429][T15670] ? copy_process+0x2c70/0x7690 [ 355.132443][T15670] ? vhost_task_create+0x1d2/0x2e0 [ 355.132454][T15670] ? kvm_mmu_post_init_vm+0x1b7/0x380 [ 355.132466][T15670] ? kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 355.132481][T15670] ? kvm_vcpu_ioctl+0x5eb/0x1690 [ 355.132500][T15670] alloc_pages_bulk_noprof+0x71c/0x1410 [ 355.132513][T15670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.132528][T15670] ? policy_nodemask+0xea/0x4e0 [ 355.132543][T15670] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 355.132555][T15670] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 355.132574][T15670] kasan_populate_vmalloc+0x112/0x2d0 [ 355.132585][T15670] ? alloc_vmap_area+0x8b5/0x29c0 [ 355.132601][T15670] alloc_vmap_area+0x960/0x29c0 [ 355.132622][T15670] ? __pfx_alloc_vmap_area+0x10/0x10 [ 355.132640][T15670] __get_vm_area_node+0x1ca/0x330 [ 355.132658][T15670] __vmalloc_node_range_noprof+0x271/0x14b0 [ 355.132675][T15670] ? vhost_task_create+0x1d2/0x2e0 [ 355.132687][T15670] ? local_lock_release+0x99/0x140 [ 355.132704][T15670] ? vhost_task_create+0x1d2/0x2e0 [ 355.132714][T15670] ? rcu_read_unlock+0x17/0x60 [ 355.132730][T15670] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 355.132751][T15670] ? vhost_task_create+0x1d2/0x2e0 [ 355.132762][T15670] __vmalloc_node_noprof+0xad/0xf0 [ 355.132777][T15670] ? vhost_task_create+0x1d2/0x2e0 [ 355.132790][T15670] copy_process+0x2c70/0x7690 [ 355.132811][T15670] ? __pfx_copy_process+0x10/0x10 [ 355.132828][T15670] ? lockdep_init_map_type+0x5c/0x280 [ 355.132840][T15670] ? lockdep_init_map_type+0x5c/0x280 [ 355.132850][T15670] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 355.132865][T15670] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 355.132884][T15670] vhost_task_create+0x1d2/0x2e0 [ 355.132894][T15670] ? __pfx_vhost_task_create+0x10/0x10 [ 355.132912][T15670] ? __pfx_vhost_task_fn+0x10/0x10 [ 355.132930][T15670] kvm_mmu_post_init_vm+0x1b7/0x380 [ 355.132943][T15670] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 355.132959][T15670] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 355.132976][T15670] kvm_vcpu_ioctl+0x5eb/0x1690 [ 355.132992][T15670] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 355.133007][T15670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.133020][T15670] ? do_vfs_ioctl+0x128/0x14f0 [ 355.133037][T15670] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 355.133054][T15670] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 355.133076][T15670] ? hook_file_ioctl_common+0x145/0x410 [ 355.133091][T15670] ? selinux_file_ioctl+0x180/0x270 [ 355.133106][T15670] ? selinux_file_ioctl+0xb4/0x270 [ 355.133122][T15670] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 355.133137][T15670] __x64_sys_ioctl+0x18e/0x210 [ 355.133155][T15670] do_syscall_64+0xcd/0x4e0 [ 355.133171][T15670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.133182][T15670] RIP: 0033:0x7feafcd8ec29 [ 355.133192][T15670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.133202][T15670] RSP: 002b:00007feafdbb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.133214][T15670] RAX: ffffffffffffffda RBX: 00007feafcfd5fa0 RCX: 00007feafcd8ec29 [ 355.133221][T15670] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 355.133227][T15670] RBP: 00007feafdbb6090 R08: 0000000000000000 R09: 0000000000000000 [ 355.133233][T15670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.133239][T15670] R13: 00007feafcfd6038 R14: 00007feafcfd5fa0 R15: 00007ffe98fac798 [ 355.133253][T15670] [ 355.282587][ T60] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 355.283668][T15670] warn_alloc: 1 callbacks suppressed [ 355.283680][T15670] syz.2.3171: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 355.293159][T15670] CPU: 2 UID: 0 PID: 15670 Comm: syz.2.3171 Not tainted syzkaller #0 PREEMPT(full) [ 355.293182][T15670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 355.293193][T15670] Call Trace: [ 355.293199][T15670] [ 355.293206][T15670] dump_stack_lvl+0x16c/0x1f0 [ 355.293239][T15670] warn_alloc+0x248/0x3a0 [ 355.293259][T15670] ? __pfx_warn_alloc+0x10/0x10 [ 355.293292][T15670] ? kfree+0x2b4/0x4d0 [ 355.293320][T15670] ? __get_vm_area_node+0x208/0x330 [ 355.293345][T15670] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 355.293366][T15670] ? local_lock_release+0x99/0x140 [ 355.293389][T15670] ? vhost_task_create+0x1d2/0x2e0 [ 355.293403][T15670] ? rcu_read_unlock+0x17/0x60 [ 355.293423][T15670] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 355.293452][T15670] ? vhost_task_create+0x1d2/0x2e0 [ 355.293465][T15670] __vmalloc_node_noprof+0xad/0xf0 [ 355.293486][T15670] ? vhost_task_create+0x1d2/0x2e0 [ 355.293505][T15670] copy_process+0x2c70/0x7690 [ 355.293535][T15670] ? __pfx_copy_process+0x10/0x10 [ 355.293558][T15670] ? lockdep_init_map_type+0x5c/0x280 [ 355.293573][T15670] ? lockdep_init_map_type+0x5c/0x280 [ 355.293586][T15670] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 355.293606][T15670] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 355.293630][T15670] vhost_task_create+0x1d2/0x2e0 [ 355.293643][T15670] ? __pfx_vhost_task_create+0x10/0x10 [ 355.293664][T15670] ? __pfx_vhost_task_fn+0x10/0x10 [ 355.293688][T15670] kvm_mmu_post_init_vm+0x1b7/0x380 [ 355.293706][T15670] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 355.293727][T15670] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 355.293750][T15670] kvm_vcpu_ioctl+0x5eb/0x1690 [ 355.293771][T15670] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 355.293790][T15670] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 355.293808][T15670] ? do_vfs_ioctl+0x128/0x14f0 [ 355.293831][T15670] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 355.293853][T15670] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 355.293882][T15670] ? hook_file_ioctl_common+0x145/0x410 [ 355.293904][T15670] ? selinux_file_ioctl+0x180/0x270 [ 355.293923][T15670] ? selinux_file_ioctl+0xb4/0x270 [ 355.293944][T15670] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 355.293964][T15670] __x64_sys_ioctl+0x18e/0x210 [ 355.293988][T15670] do_syscall_64+0xcd/0x4e0 [ 355.294008][T15670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.294022][T15670] RIP: 0033:0x7feafcd8ec29 [ 355.294034][T15670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.294047][T15670] RSP: 002b:00007feafdbb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.294061][T15670] RAX: ffffffffffffffda RBX: 00007feafcfd5fa0 RCX: 00007feafcd8ec29 [ 355.294070][T15670] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 355.294078][T15670] RBP: 00007feafdbb6090 R08: 0000000000000000 R09: 0000000000000000 [ 355.294086][T15670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.294094][T15670] R13: 00007feafcfd6038 R14: 00007feafcfd5fa0 R15: 00007ffe98fac798 [ 355.294114][T15670] [ 355.294131][T15670] Mem-Info: [ 355.394937][T15670] active_anon:29162 inactive_anon:0 isolated_anon:0 [ 355.394937][T15670] active_file:5447 inactive_file:32535 isolated_file:0 [ 355.394937][T15670] unevictable:1768 dirty:407 writeback:0 [ 355.394937][T15670] slab_reclaimable:9017 slab_unreclaimable:80072 [ 355.394937][T15670] mapped:29740 shmem:21646 pagetables:1439 [ 355.394937][T15670] sec_pagetables:319 bounce:0 [ 355.394937][T15670] kernel_misc_reclaimable:0 [ 355.394937][T15670] free:448909 free_pcp:8039 free_cma:0 [ 355.408672][T15670] Node 0 active_anon:116648kB inactive_anon:0kB active_file:16580kB inactive_file:129944kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:118960kB dirty:1620kB writeback:0kB shmem:83048kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13584kB pagetables:5544kB sec_pagetables:1276kB all_unreclaimable? no Balloon:0kB [ 355.419087][T15670] Node 1 active_anon:0kB inactive_anon:0kB active_file:5208kB inactive_file:196kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:144kB pagetables:212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 355.428387][T15670] Node 0 DMA free:14216kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:768kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:260kB local_pcp:104kB free_cma:0kB [ 355.437203][ T60] usb 8-1: Using ep0 maxpacket: 8 [ 355.438780][T15670] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 355.440737][T15670] Node 0 DMA32 free:180648kB boost:18432kB min:45948kB low:52824kB high:59700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116648kB inactive_anon:0kB active_file:15812kB inactive_file:129944kB unevictable:3536kB writepending:1620kB present:2080628kB managed:1263420kB mlocked:0kB bounce:0kB free_pcp:21456kB local_pcp:4460kB free_cma:0kB [ 355.451398][T15670] lowmem_reserve[]: 0 0 0 0 0 [ 355.452136][ T60] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 355.453471][T15670] Node 1 Normal free:1600772kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:5208kB inactive_file:196kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:10240kB local_pcp:7084kB free_cma:0kB [ 355.453527][T15670] lowmem_reserve[]: 0 0 0 0 0 [ 355.453562][T15670] Node 0 DMA: 18*4kB (UM) 18*8kB (UM) 11*16kB (UM) 14*32kB (UM) 11*64kB (UM) 9*128kB (UM) 7*256kB (UM) 3*512kB (UM) 0*1024kB 2*2048kB (U) 1*4096kB (U) = 14216kB [ 355.453711][T15670] Node 0 DMA32: 1948*4kB (ME) 821*8kB (UME) 93*16kB (ME) 796*32kB (UME) [ 355.456287][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 355.456316][ T60] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.466743][T15670] 340*64kB [ 355.469685][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.474278][T15670] (UME) 138*128kB (UME) 60*256kB (UME) 29*512kB (UM) 8*1024kB (UM) 18*2048kB (UM) 6*4096kB (UM) = 180584kB [ 355.474350][T15670] Node 1 Normal: 82*4kB (UME) 102*8kB (UME) 53*16kB (UME) 142*32kB (UME) 112*64kB (UME) 57*128kB (UME) 17*256kB (UM) 13*512kB (UME) 14*1024kB (UME) 9*2048kB (UM) 375*4096kB (UM) = 1600776kB [ 355.474504][T15670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.479659][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 355.481788][T15670] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.487752][ T60] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 355.491508][T15670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.496305][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 355.501872][T15670] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.505791][ T60] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.508915][T15670] 59624 total pagecache pages [ 355.513099][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.515070][T15670] 0 pages in swap cache [ 355.518245][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 355.522214][T15670] Free swap = 124996kB [ 355.527274][ T60] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 355.530879][T15670] Total swap = 124996kB [ 355.531831][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 355.531848][ T60] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.536592][T15670] 1048443 pages RAM [ 355.538680][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.543031][T15670] 0 pages HighMem/MovableOnly [ 355.544743][ T60] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 355.546616][ T60] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 355.547977][T15670] 283275 pages reserved [ 355.549127][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.553912][T15670] 0 pages cma reserved [ 355.557241][ T60] usb 8-1: Product: syz [ 355.557250][ T60] usb 8-1: Manufacturer: syz [ 355.557258][ T60] usb 8-1: SerialNumber: syz [ 355.620550][T15679] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 355.622706][T15679] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 355.627078][T15679] vhci_hcd vhci_hcd.0: Device attached [ 355.631807][T15679] vhci_hcd vhci_hcd.0: port 0 already used [ 355.640582][T15685] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 355.665660][T15681] vhci_hcd: connection closed [ 355.667104][ T1173] vhci_hcd: stop threads [ 355.670362][ T1173] vhci_hcd: release socket [ 355.673583][ T1173] vhci_hcd: disconnect device [ 355.724749][T15693] openvswitch: netlink: Key 0 has unexpected len 9 expected 0 [ 355.727797][T15693] openvswitch: netlink: Key 0 has unexpected len 9 expected 0 [ 355.731578][T15693] openvswitch: netlink: Key 0 has unexpected len 9 expected 0 [ 355.735105][T15693] openvswitch: netlink: Key 0 has unexpected len 9 expected 0 [ 355.738336][T15693] openvswitch: netlink: Key 0 has unexpected len 9 expected 0 [ 355.741655][T15693] openvswitch: netlink: Key 0 has unexpected len 9 expected 0 [ 355.745782][T15693] openvswitch: netlink: Key 0 has unexpected len 9 expected 0 [ 355.750760][T15693] openvswitch: netlink: Key 0 has unexpected len 9 expected 0 [ 355.754339][T15693] openvswitch: netlink: Key 0 has unexpected len 9 expected 0 [ 355.757467][T15693] openvswitch: netlink: Key 0 has unexpected len 9 expected 0 [ 355.778454][ T60] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 355.787758][T15699] FAULT_INJECTION: forcing a failure. [ 355.787758][T15699] name failslab, interval 1, probability 0, space 0, times 0 [ 355.789731][ T60] usb 8-1: USB disconnect, device number 32 [ 355.792047][T15699] CPU: 2 UID: 0 PID: 15699 Comm: syz.4.3180 Not tainted syzkaller #0 PREEMPT(full) [ 355.792063][T15699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 355.792070][T15699] Call Trace: [ 355.792074][T15699] [ 355.792078][T15699] dump_stack_lvl+0x16c/0x1f0 [ 355.792096][T15699] should_fail_ex+0x512/0x640 [ 355.792111][T15699] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 355.792125][T15699] should_failslab+0xc2/0x120 [ 355.792138][T15699] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 355.792150][T15699] ? __alloc_skb+0x2b2/0x380 [ 355.792165][T15699] __alloc_skb+0x2b2/0x380 [ 355.792177][T15699] ? __pfx___alloc_skb+0x10/0x10 [ 355.792191][T15699] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 355.792208][T15699] netlink_alloc_large_skb+0x69/0x130 [ 355.792224][T15699] netlink_sendmsg+0x6a1/0xdd0 [ 355.792257][T15699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.792277][T15699] ____sys_sendmsg+0xa95/0xc70 [ 355.792294][T15699] ? copy_msghdr_from_user+0x10a/0x160 [ 355.792308][T15699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.792331][T15699] ___sys_sendmsg+0x134/0x1d0 [ 355.792346][T15699] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.792376][T15699] __sys_sendmsg+0x16d/0x220 [ 355.792390][T15699] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.792413][T15699] do_syscall_64+0xcd/0x4e0 [ 355.792429][T15699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.792441][T15699] RIP: 0033:0x7f0ab6d8ec29 [ 355.792450][T15699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.792460][T15699] RSP: 002b:00007f0ab7c94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.792472][T15699] RAX: ffffffffffffffda RBX: 00007f0ab6fd5fa0 RCX: 00007f0ab6d8ec29 [ 355.792478][T15699] RDX: 000000000000c880 RSI: 00002000000002c0 RDI: 0000000000000003 [ 355.792485][T15699] RBP: 00007f0ab7c94090 R08: 0000000000000000 R09: 0000000000000000 [ 355.792491][T15699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.792497][T15699] R13: 00007f0ab6fd6038 R14: 00007f0ab6fd5fa0 R15: 00007ffdba665018 [ 355.792511][T15699] [ 355.882929][T15725] Failed to get privilege flags for destination (handle=0x2:0x0) [ 355.954095][T15739] nbd_handle_cmd: 2 callbacks suppressed [ 355.954108][T15739] block nbd4: Attempted send on invalid socket [ 355.957866][T15739] blk_print_req_error: 2 callbacks suppressed [ 355.957875][T15739] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.963142][T15739] block nbd4: Attempted send on invalid socket [ 355.965127][T15739] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.967967][T15739] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 355.970983][T15739] block nbd4: Attempted send on invalid socket [ 355.973405][T15739] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.976494][T15739] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 355.979520][T15739] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 355.981895][T15739] UDF-fs: Scanning with blocksize 512 failed [ 355.984823][T15739] block nbd4: Attempted send on invalid socket [ 355.986803][T15739] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.989750][T15739] block nbd4: Attempted send on invalid socket [ 355.991719][T15739] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 355.995145][T15739] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 355.998267][T15739] block nbd4: Attempted send on invalid socket [ 356.000280][T15739] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.003566][T15739] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 356.006786][T15739] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 356.009163][T15739] UDF-fs: Scanning with blocksize 1024 failed [ 356.011512][T15739] block nbd4: Attempted send on invalid socket [ 356.014070][T15739] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.017246][T15739] block nbd4: Attempted send on invalid socket [ 356.019314][T15739] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.022424][T15739] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 356.025546][T15739] block nbd4: Attempted send on invalid socket [ 356.027629][T15739] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.030663][T15739] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 356.033751][T15739] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 356.036177][T15739] UDF-fs: Scanning with blocksize 2048 failed [ 356.038463][T15739] block nbd4: Attempted send on invalid socket [ 356.040445][T15739] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 356.044843][T15739] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 356.047852][T15739] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 356.050940][T15739] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 356.053400][T15739] UDF-fs: Scanning with blocksize 4096 failed [ 356.055393][T15739] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 356.108718][T15748] fuse: Unknown parameter 'fd0x0000000000000003' [ 356.223585][T15755] FAULT_INJECTION: forcing a failure. [ 356.223585][T15755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.228376][T15755] CPU: 0 UID: 0 PID: 15755 Comm: syz.1.3189 Not tainted syzkaller #0 PREEMPT(full) [ 356.228398][T15755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 356.228408][T15755] Call Trace: [ 356.228415][T15755] [ 356.228421][T15755] dump_stack_lvl+0x16c/0x1f0 [ 356.228446][T15755] should_fail_ex+0x512/0x640 [ 356.228467][T15755] _copy_to_user+0x32/0xd0 [ 356.228493][T15755] video_usercopy+0xf3e/0x1720 [ 356.228515][T15755] ? __pfx___video_do_ioctl+0x10/0x10 [ 356.228538][T15755] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 356.228562][T15755] ? __pfx_video_usercopy+0x10/0x10 [ 356.228594][T15755] v4l2_ioctl+0x1bd/0x250 [ 356.228612][T15755] ? __pfx_v4l2_ioctl+0x10/0x10 [ 356.228631][T15755] __x64_sys_ioctl+0x18e/0x210 [ 356.228657][T15755] do_syscall_64+0xcd/0x4e0 [ 356.228677][T15755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.228693][T15755] RIP: 0033:0x7fa106b8ec29 [ 356.228708][T15755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.228722][T15755] RSP: 002b:00007fa107a24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.228738][T15755] RAX: ffffffffffffffda RBX: 00007fa106dd6090 RCX: 00007fa106b8ec29 [ 356.228748][T15755] RDX: 0000200000000400 RSI: 00000000c008561c RDI: 0000000000000006 [ 356.228758][T15755] RBP: 00007fa107a24090 R08: 0000000000000000 R09: 0000000000000000 [ 356.228764][T15755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.228773][T15755] R13: 00007fa106dd6128 R14: 00007fa106dd6090 R15: 00007ffede986808 [ 356.228794][T15755] [ 356.289601][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.622617][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3191'. [ 356.875280][T15767] XFS (nbd3): SB validate failed with error -5. [ 356.932621][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3195'. [ 356.938954][ C2] vcan0: j1939_xtp_rx_dat: no tx connection found [ 356.940756][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 356.942969][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 356.945034][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 356.947194][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 356.949533][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 356.952358][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 356.955182][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 356.957517][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 356.959788][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 356.962189][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 356.964505][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 356.966813][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 356.969041][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 356.971345][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 356.973687][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 356.975959][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 356.978349][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 356.981362][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 356.983955][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 356.986218][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 356.988558][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 356.990931][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 356.993221][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 356.995504][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 356.997697][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.000110][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.003144][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.006161][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.008642][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.011079][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.013607][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.015852][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.018037][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.020278][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.022595][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.024892][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.027138][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.029311][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.031684][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.034291][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.036941][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.039888][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.042463][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.044720][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.046934][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.049173][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.051414][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.053812][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.055988][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.058206][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.059803][T15774] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 357.060373][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.064291][T15774] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 357.067006][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.073646][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.075842][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.077975][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.080168][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 357.082455][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 357.178561][T15779] FAULT_INJECTION: forcing a failure. [ 357.178561][T15779] name failslab, interval 1, probability 0, space 0, times 0 [ 357.183269][T15779] CPU: 1 UID: 0 PID: 15779 Comm: syz.3.3198 Not tainted syzkaller #0 PREEMPT(full) [ 357.183285][T15779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 357.183293][T15779] Call Trace: [ 357.183297][T15779] [ 357.183301][T15779] dump_stack_lvl+0x16c/0x1f0 [ 357.183336][T15779] should_fail_ex+0x512/0x640 [ 357.183353][T15779] ? fs_reclaim_acquire+0xae/0x150 [ 357.183370][T15779] ? tomoyo_encode2+0x100/0x3e0 [ 357.183385][T15779] should_failslab+0xc2/0x120 [ 357.183398][T15779] __kmalloc_noprof+0xd2/0x510 [ 357.183410][T15779] ? d_absolute_path+0x136/0x1a0 [ 357.183429][T15779] tomoyo_encode2+0x100/0x3e0 [ 357.183446][T15779] tomoyo_encode+0x29/0x50 [ 357.183462][T15779] tomoyo_realpath_from_path+0x18f/0x6e0 [ 357.183482][T15779] tomoyo_path_number_perm+0x245/0x580 [ 357.183500][T15779] ? tomoyo_path_number_perm+0x237/0x580 [ 357.183517][T15779] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 357.183532][T15779] ? find_held_lock+0x2b/0x80 [ 357.183558][T15779] ? find_held_lock+0x2b/0x80 [ 357.183571][T15779] ? hook_file_ioctl_common+0x145/0x410 [ 357.183586][T15779] ? __fget_files+0x20e/0x3c0 [ 357.183601][T15779] security_file_ioctl+0x9b/0x240 [ 357.183618][T15779] __x64_sys_ioctl+0xb7/0x210 [ 357.183636][T15779] do_syscall_64+0xcd/0x4e0 [ 357.183656][T15779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.183667][T15779] RIP: 0033:0x7ff18c18ec29 [ 357.183675][T15779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.183686][T15779] RSP: 002b:00007ff18cfe2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.183696][T15779] RAX: ffffffffffffffda RBX: 00007ff18c3d5fa0 RCX: 00007ff18c18ec29 [ 357.183704][T15779] RDX: 00002000000007c0 RSI: 0000000080506409 RDI: 0000000000000003 [ 357.183710][T15779] RBP: 00007ff18cfe2090 R08: 0000000000000000 R09: 0000000000000000 [ 357.183716][T15779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.183736][T15779] R13: 00007ff18c3d6038 R14: 00007ff18c3d5fa0 R15: 00007ffef43d72f8 [ 357.183750][T15779] [ 357.184352][T15779] ERROR: Out of memory at tomoyo_realpath_from_path. [ 357.208102][T15780] binder: BINDER_SET_CONTEXT_MGR already set [ 357.263620][T15780] binder: 15776:15780 ioctl 4018620d 200000000100 returned -16 [ 357.273885][T15780] binder: 15776:15780 ioctl ae80 0 returned -22 [ 357.277658][T15780] binder: BINDER_SET_CONTEXT_MGR already set [ 357.281928][T15780] binder: 15776:15780 ioctl 4018620d 200000004a80 returned -16 [ 357.291238][T15785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15785 comm=syz.1.3200 [ 357.292120][T15780] binder_alloc: 15776: binder_alloc_buf, no vma [ 357.351613][T15790] netlink: 'syz.3.3202': attribute type 4 has an invalid length. [ 357.362643][T15790] netlink: 'syz.3.3202': attribute type 4 has an invalid length. [ 357.367648][ T40] kauditd_printk_skb: 284 callbacks suppressed [ 357.367661][ T40] audit: type=1400 audit(1758545040.508:36240): avc: denied { prog_load } for pid=15789 comm="syz.3.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.377973][ T40] audit: type=1400 audit(1758545040.508:36241): avc: denied { bpf } for pid=15789 comm="syz.3.3202" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.386585][ T40] audit: type=1400 audit(1758545040.508:36242): avc: denied { perfmon } for pid=15789 comm="syz.3.3202" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.394544][ T40] audit: type=1400 audit(1758545040.508:36243): avc: denied { prog_run } for pid=15789 comm="syz.3.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.404769][ T40] audit: type=1400 audit(1758545040.548:36244): avc: denied { unmount } for pid=13693 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 357.428685][ T40] audit: type=1400 audit(1758545040.568:36245): avc: denied { map_read map_write } for pid=15793 comm="syz.1.3204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.566529][ T40] audit: type=1400 audit(1758545040.708:36246): avc: denied { create } for pid=15796 comm="syz.1.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 357.616683][ T40] audit: type=1400 audit(1758545040.758:36247): avc: denied { write } for pid=15796 comm="syz.1.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 357.648964][ T40] audit: type=1400 audit(1758545040.788:36248): avc: denied { ioctl } for pid=15791 comm="syz.3.3203" path="socket:[58726]" dev="sockfs" ino=58726 ioctlcmd=0x42c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 357.649436][T15801] random: crng reseeded on system resumption [ 357.659358][ T40] audit: type=1400 audit(1758545040.788:36249): avc: denied { write } for pid=15791 comm="syz.3.3203" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 358.150886][T15808] FAULT_INJECTION: forcing a failure. [ 358.150886][T15808] name failslab, interval 1, probability 0, space 0, times 0 [ 358.155416][T15808] CPU: 2 UID: 0 PID: 15808 Comm: syz.4.3207 Not tainted syzkaller #0 PREEMPT(full) [ 358.155431][T15808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 358.155439][T15808] Call Trace: [ 358.155443][T15808] [ 358.155447][T15808] dump_stack_lvl+0x16c/0x1f0 [ 358.155470][T15808] should_fail_ex+0x512/0x640 [ 358.155484][T15808] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 358.155498][T15808] should_failslab+0xc2/0x120 [ 358.155511][T15808] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 358.155521][T15808] ? kasan_save_stack+0x42/0x60 [ 358.155532][T15808] ? kasan_save_stack+0x33/0x60 [ 358.155541][T15808] ? kasan_save_track+0x14/0x30 [ 358.155551][T15808] ? fuse_request_alloc+0x22/0x200 [ 358.155566][T15808] fuse_request_alloc+0x22/0x200 [ 358.155579][T15808] fuse_get_req+0x748/0xfd0 [ 358.155596][T15808] ? __pfx_fuse_get_req+0x10/0x10 [ 358.155612][T15808] ? map_id_range_down+0x2bc/0x3b0 [ 358.155628][T15808] __fuse_simple_request+0xb8/0xcb0 [ 358.155646][T15808] fuse_getxattr+0x255/0x420 [ 358.155659][T15808] ? __pfx_fuse_getxattr+0x10/0x10 [ 358.155672][T15808] ? find_held_lock+0x2b/0x80 [ 358.155686][T15808] ? fuse_change_attributes_i+0x31e/0x920 [ 358.155705][T15808] ? fuse_do_getattr+0x3d6/0x540 [ 358.155724][T15808] ? __pfx_fuse_xattr_get+0x10/0x10 [ 358.155736][T15808] fuse_xattr_get+0x7b/0xb0 [ 358.155748][T15808] __vfs_getxattr+0x13d/0x1a0 [ 358.155761][T15808] ? __pfx___vfs_getxattr+0x10/0x10 [ 358.155773][T15808] ? __lock_acquire+0xb97/0x1ce0 [ 358.155793][T15808] cap_inode_need_killpriv+0x40/0x60 [ 358.155807][T15808] security_inode_need_killpriv+0x1b9/0x1e0 [ 358.155824][T15808] file_remove_privs_flags+0x331/0x580 [ 358.155841][T15808] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 358.155857][T15808] ? __pfx___might_resched+0x10/0x10 [ 358.155871][T15808] ? generic_write_check_limits+0x1f1/0x290 [ 358.155890][T15808] ? generic_write_checks+0x311/0x480 [ 358.155908][T15808] ? __pfx_generic_write_checks+0x10/0x10 [ 358.155928][T15808] kiocb_modified+0x8b/0x2c0 [ 358.155944][T15808] fuse_file_write_iter+0x34d/0x990 [ 358.155974][T15808] do_iter_readv_writev+0x65f/0x9e0 [ 358.155994][T15808] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 358.156019][T15808] vfs_writev+0x35f/0xde0 [ 358.156033][T15808] ? __pfx_vfs_writev+0x10/0x10 [ 358.156042][T15808] ? __mutex_lock+0x1c5/0x1060 [ 358.156061][T15808] ? __pfx___mutex_lock+0x10/0x10 [ 358.156080][T15808] ? __fget_files+0x20e/0x3c0 [ 358.156091][T15808] ? __fget_files+0x190/0x3c0 [ 358.156107][T15808] ? do_writev+0x132/0x340 [ 358.156116][T15808] do_writev+0x132/0x340 [ 358.156126][T15808] ? __pfx_do_writev+0x10/0x10 [ 358.156140][T15808] do_syscall_64+0xcd/0x4e0 [ 358.156156][T15808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.156167][T15808] RIP: 0033:0x7f0ab6d8ec29 [ 358.156176][T15808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.156187][T15808] RSP: 002b:00007f0ab7c94038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 358.156197][T15808] RAX: ffffffffffffffda RBX: 00007f0ab6fd5fa0 RCX: 00007f0ab6d8ec29 [ 358.156204][T15808] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006 [ 358.156210][T15808] RBP: 00007f0ab7c94090 R08: 0000000000000000 R09: 0000000000000000 [ 358.156217][T15808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.156223][T15808] R13: 00007f0ab6fd6038 R14: 00007f0ab6fd5fa0 R15: 00007ffdba665018 [ 358.156236][T15808] [ 358.449391][T15816] FAULT_INJECTION: forcing a failure. [ 358.449391][T15816] name failslab, interval 1, probability 0, space 0, times 0 [ 358.453296][T15816] CPU: 1 UID: 0 PID: 15816 Comm: syz.3.3210 Not tainted syzkaller #0 PREEMPT(full) [ 358.453311][T15816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 358.453318][T15816] Call Trace: [ 358.453323][T15816] [ 358.453327][T15816] dump_stack_lvl+0x16c/0x1f0 [ 358.453345][T15816] should_fail_ex+0x512/0x640 [ 358.453359][T15816] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 358.453373][T15816] should_failslab+0xc2/0x120 [ 358.453386][T15816] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 358.453397][T15816] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 358.453414][T15816] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 358.453429][T15816] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 358.453449][T15816] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 358.453469][T15816] mmu_topup_memory_caches+0x25/0x170 [ 358.453482][T15816] kvm_mmu_load+0xd6/0x23c0 [ 358.453493][T15816] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 358.453505][T15816] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 358.453521][T15816] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 358.453536][T15816] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 358.453550][T15816] ? __pfx_kvm_mmu_load+0x10/0x10 [ 358.453561][T15816] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 358.453578][T15816] ? kvm_check_and_inject_events+0x71c/0x1310 [ 358.453597][T15816] vcpu_run+0x35a3/0x55a0 [ 358.453612][T15816] ? __lock_acquire+0xb97/0x1ce0 [ 358.453633][T15816] ? __pfx_vcpu_run+0x10/0x10 [ 358.453650][T15816] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 358.453665][T15816] ? __local_bh_enable_ip+0xa4/0x120 [ 358.453681][T15816] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 358.453697][T15816] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 358.453716][T15816] kvm_vcpu_ioctl+0x5eb/0x1690 [ 358.453732][T15816] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 358.453747][T15816] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 358.453761][T15816] ? do_vfs_ioctl+0x128/0x14f0 [ 358.453779][T15816] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 358.453796][T15816] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 358.453817][T15816] ? hook_file_ioctl_common+0x145/0x410 [ 358.453833][T15816] ? selinux_file_ioctl+0x180/0x270 [ 358.453848][T15816] ? selinux_file_ioctl+0xb4/0x270 [ 358.453864][T15816] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 358.453880][T15816] __x64_sys_ioctl+0x18e/0x210 [ 358.453898][T15816] do_syscall_64+0xcd/0x4e0 [ 358.453914][T15816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.453925][T15816] RIP: 0033:0x7ff18c18ec29 [ 358.453934][T15816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.453944][T15816] RSP: 002b:00007ff18cfe2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.453955][T15816] RAX: ffffffffffffffda RBX: 00007ff18c3d5fa0 RCX: 00007ff18c18ec29 [ 358.453962][T15816] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 358.453968][T15816] RBP: 00007ff18cfe2090 R08: 0000000000000000 R09: 0000000000000000 [ 358.453975][T15816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 358.453981][T15816] R13: 00007ff18c3d6038 R14: 00007ff18c3d5fa0 R15: 00007ffef43d72f8 [ 358.453994][T15816] [ 358.762507][T15830] binder: 15828:15830 ioctl c0306201 200000000080 returned -14 [ 358.767889][T15830] devtmpfs: Unknown parameter 'usrquota_inodÐɤÏDñœù•—¹Þe_hardlimit' [ 359.071762][T15840] random: crng reseeded on system resumption [ 359.858515][T15849] syz.2.3221: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 359.864498][T15849] sp0: Synchronizing with TNC [ 359.868673][T15848] [U] è`` [ 359.962009][T15856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3224'. [ 360.002561][T15859] netlink: 'syz.2.3225': attribute type 6 has an invalid length. [ 360.432395][ T842] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 360.582320][ T842] usb 8-1: Using ep0 maxpacket: 16 [ 360.588484][ T842] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 360.591158][ T842] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 360.593779][ T842] usb 8-1: Product: syz [ 360.595048][ T842] usb 8-1: Manufacturer: syz [ 360.597485][ T842] usb 8-1: SerialNumber: syz [ 360.600547][ T842] usb 8-1: config 0 descriptor?? [ 360.806966][ T6051] usb 8-1: USB disconnect, device number 33 [ 360.872808][T15870] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 360.892680][T15870] macsec1: entered promiscuous mode [ 360.894470][T15870] bridge0: entered promiscuous mode [ 360.896513][T15870] bridge0: port 3(macsec1) entered blocking state [ 360.899235][T15870] bridge0: port 3(macsec1) entered disabled state [ 360.901999][T15870] macsec1: entered allmulticast mode [ 360.905117][T15870] bridge0: entered allmulticast mode [ 360.908803][T15870] macsec1: left allmulticast mode [ 360.910859][T15870] bridge0: left allmulticast mode [ 360.914654][T15870] bridge0: left promiscuous mode [ 360.941343][T15871] [ 360.942161][T15871] ====================================================== [ 360.944328][T15871] WARNING: possible circular locking dependency detected [ 360.946502][T15871] syzkaller #0 Not tainted [ 360.948026][T15871] ------------------------------------------------------ [ 360.951691][T15871] syz.2.3228/15871 is trying to acquire lock: [ 360.953584][T15871] ffff8880561b3b38 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}, at: walk_component+0x345/0x5b0 [ 360.956825][T15871] [ 360.956825][T15871] but task is already holding lock: [ 360.959527][T15871] ffff888026870088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 360.963167][T15871] [ 360.963167][T15871] which lock already depends on the new lock. [ 360.963167][T15871] [ 360.967160][T15871] [ 360.967160][T15871] the existing dependency chain (in reverse order) is: [ 360.970560][T15871] [ 360.970560][T15871] -> #3 (&of->mutex){+.+.}-{4:4}: [ 360.973382][T15871] __mutex_lock+0x193/0x1060 [ 360.975315][T15871] kernfs_fop_write_iter+0x28f/0x570 [ 360.977669][T15871] iter_file_splice_write+0xa21/0x12e0 [ 360.980141][T15871] do_splice+0x1475/0x1fc0 [ 360.982163][T15871] __do_splice+0x32a/0x360 [ 360.984051][T15871] __x64_sys_splice+0x187/0x250 [ 360.985725][T15871] do_syscall_64+0xcd/0x4e0 [ 360.987398][T15871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.989788][T15871] [ 360.989788][T15871] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 360.992696][T15871] __mutex_lock+0x193/0x1060 [ 360.994740][T15871] pipe_lock+0x64/0x80 [ 360.996583][T15871] iter_file_splice_write+0x1ea/0x12e0 [ 360.998477][T15871] do_splice+0x1475/0x1fc0 [ 361.000035][T15871] __do_splice+0x32a/0x360 [ 361.001590][T15871] __x64_sys_splice+0x187/0x250 [ 361.003503][T15871] do_syscall_64+0xcd/0x4e0 [ 361.005109][T15871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.007128][T15871] [ 361.007128][T15871] -> #1 (sb_writers#6){.+.+}-{0:0}: [ 361.009435][T15871] mnt_want_write+0x6f/0x450 [ 361.011056][T15871] ovl_fileattr_set+0x108/0x2c0 [ 361.012728][T15871] vfs_fileattr_set+0x77c/0xb80 [ 361.014401][T15871] ioctl_setflags+0x1c1/0x210 [ 361.016024][T15871] do_vfs_ioctl+0x120/0x14f0 [ 361.017650][T15871] __x64_sys_ioctl+0x114/0x210 [ 361.019329][T15871] do_syscall_64+0xcd/0x4e0 [ 361.020915][T15871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.022865][T15871] [ 361.022865][T15871] -> #0 (&ovl_i_mutex_dir_key[depth]#2){++++}-{4:4}: [ 361.025589][T15871] __lock_acquire+0x12a6/0x1ce0 [ 361.027267][T15871] lock_acquire+0x179/0x350 [ 361.028788][T15871] down_read+0x9b/0x480 [ 361.030242][T15871] walk_component+0x345/0x5b0 [ 361.031823][T15871] path_lookupat+0x142/0x6d0 [ 361.033374][T15871] filename_lookup+0x224/0x5f0 [ 361.034983][T15871] kern_path+0x35/0x50 [ 361.036422][T15871] lookup_bdev+0xd8/0x280 [ 361.037916][T15871] resume_store+0x1d6/0x460 [ 361.039468][T15871] kobj_attr_store+0x55/0x80 [ 361.041040][T15871] sysfs_kf_write+0xf2/0x150 [ 361.042625][T15871] kernfs_fop_write_iter+0x3af/0x570 [ 361.044417][T15871] vfs_write+0x7d3/0x11d0 [ 361.045914][T15871] ksys_write+0x12a/0x250 [ 361.047468][T15871] do_syscall_64+0xcd/0x4e0 [ 361.048999][T15871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.050963][T15871] [ 361.050963][T15871] other info that might help us debug this: [ 361.050963][T15871] [ 361.054007][T15871] Chain exists of: [ 361.054007][T15871] &ovl_i_mutex_dir_key[depth]#2 --> &pipe->mutex --> &of->mutex [ 361.054007][T15871] [ 361.058094][T15871] Possible unsafe locking scenario: [ 361.058094][T15871] [ 361.060393][T15871] CPU0 CPU1 [ 361.062043][T15871] ---- ---- [ 361.063693][T15871] lock(&of->mutex); [ 361.064933][T15871] lock(&pipe->mutex); [ 361.067264][T15871] lock(&of->mutex); [ 361.069495][T15871] rlock(&ovl_i_mutex_dir_key[depth]#2); [ 361.071258][T15871] [ 361.071258][T15871] *** DEADLOCK *** [ 361.071258][T15871] [ 361.073739][T15871] 4 locks held by syz.2.3228/15871: [ 361.075326][T15871] #0: ffff8880374f2d38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 361.078086][T15871] #1: ffff88802d7c6428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 361.080870][T15871] #2: ffff888026870088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 361.083871][T15871] #3: ffff88801c36e0f8 (kn->active#75){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 361.086961][T15871] [ 361.086961][T15871] stack backtrace: [ 361.088817][T15871] CPU: 3 UID: 0 PID: 15871 Comm: syz.2.3228 Not tainted syzkaller #0 PREEMPT(full) [ 361.088832][T15871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 361.088840][T15871] Call Trace: [ 361.088844][T15871] [ 361.088849][T15871] dump_stack_lvl+0x116/0x1f0 [ 361.088865][T15871] print_circular_bug+0x275/0x350 [ 361.088884][T15871] check_noncircular+0x14c/0x170 [ 361.088902][T15871] __lock_acquire+0x12a6/0x1ce0 [ 361.088922][T15871] lock_acquire+0x179/0x350 [ 361.088931][T15871] ? walk_component+0x345/0x5b0 [ 361.088943][T15871] ? __pfx___might_resched+0x10/0x10 [ 361.088956][T15871] ? try_to_unlazy+0x24e/0x660 [ 361.088966][T15871] down_read+0x9b/0x480 [ 361.088981][T15871] ? walk_component+0x345/0x5b0 [ 361.088991][T15871] ? __pfx_down_read+0x10/0x10 [ 361.089005][T15871] ? lookup_fast+0x156/0x610 [ 361.089016][T15871] walk_component+0x345/0x5b0 [ 361.089026][T15871] path_lookupat+0x142/0x6d0 [ 361.089037][T15871] filename_lookup+0x224/0x5f0 [ 361.089049][T15871] ? __pfx_filename_lookup+0x10/0x10 [ 361.089065][T15871] ? getname_kernel+0x52/0x370 [ 361.089079][T15871] ? __asan_memcpy+0x3c/0x60 [ 361.089096][T15871] kern_path+0x35/0x50 [ 361.089107][T15871] lookup_bdev+0xd8/0x280 [ 361.089123][T15871] ? __pfx_lookup_bdev+0x10/0x10 [ 361.089138][T15871] ? resume_store+0x1b8/0x460 [ 361.089150][T15871] ? __asan_memcpy+0x3c/0x60 [ 361.089166][T15871] resume_store+0x1d6/0x460 [ 361.089178][T15871] ? __pfx_resume_store+0x10/0x10 [ 361.089191][T15871] ? find_held_lock+0x2b/0x80 [ 361.089205][T15871] ? __pfx_resume_store+0x10/0x10 [ 361.089221][T15871] kobj_attr_store+0x55/0x80 [ 361.089236][T15871] ? __pfx_kobj_attr_store+0x10/0x10 [ 361.089251][T15871] sysfs_kf_write+0xf2/0x150 [ 361.089264][T15871] kernfs_fop_write_iter+0x3af/0x570 [ 361.089275][T15871] ? __pfx_sysfs_kf_write+0x10/0x10 [ 361.089289][T15871] vfs_write+0x7d3/0x11d0 [ 361.089300][T15871] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 361.089313][T15871] ? __pfx___mutex_lock+0x10/0x10 [ 361.089326][T15871] ? __pfx_vfs_write+0x10/0x10 [ 361.089341][T15871] ksys_write+0x12a/0x250 [ 361.089351][T15871] ? __pfx_ksys_write+0x10/0x10 [ 361.089364][T15871] do_syscall_64+0xcd/0x4e0 [ 361.089378][T15871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.089389][T15871] RIP: 0033:0x7feafcd8ec29 [ 361.089398][T15871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.089408][T15871] RSP: 002b:00007feafdb95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 361.089418][T15871] RAX: ffffffffffffffda RBX: 00007feafcfd6090 RCX: 00007feafcd8ec29 [ 361.089425][T15871] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 361.089431][T15871] RBP: 00007feafce11e41 R08: 0000000000000000 R09: 0000000000000000 [ 361.089437][T15871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.089443][T15871] R13: 00007feafcfd6128 R14: 00007feafcfd6090 R15: 00007ffe98fac798 [ 361.089452][T15871] [ 361.183438][T15871] PM: Image not found (code -22) VM DIAGNOSIS: 12:44:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000a2e7b4 RBX=0000000000000000 RCX=ffffffff8b94cb49 RDX=ffffed100d486656 RSI=ffffffff8c163380 RDI=ffffffff81914111 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feafcc5f1e0 CR3=000000003b5a6000 CR4=00352ef0 DR0=0000000000000000 DR1=000000006000000c DR2=00000000000000a7 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe98facb20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe98facca6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe98facca6 00007ffe98faccac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafce12e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafce12e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafce12e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafce12e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafce12f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafce12fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000cb6eb4 RBX=0000000000000001 RCX=ffffffff8b94cb49 RDX=ffffed100d4a6656 RSI=ffffffff8c163380 RDI=ffffffff81914111 RBP=ffffed1003bd7488 RSP=ffffc90000177df8 R8 =0000000000000000 R9 =ffffed100d4a6655 R10=ffff88806a5332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801deba440 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feafdb95d58 CR3=000000002ac2c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000003bf12 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555d1ff19d 000055555d1fef70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055555d20f50a 000055555d20e8a0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1608000388032208 0003800300040001 e4ca840800028004 01c7100008004b9a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002800302800401 98030000000001ff fffffffffffffff7 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe000001123a0801 8180030004188282 d98e080001000000 080606012bca2202 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a1000080175f0 0409000000000100 12020901031701af a680071604101876 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01068004108de2d4 c208000108000601 24fc0fffffffffff ff04018180044810 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a1000080175f0 0409000000000100 12020901031701af a680071604101876 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fe000001123a0801 8180030004188282 d98e080001000000 080606012bca2202 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002800302800401 98030000000001ff fffffffffffffff7 080190031fffffff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000066ddac RBX=0000000000000002 RCX=ffffffff8b94cb49 RDX=ffffed100d4c6656 RSI=ffffffff8c163380 RDI=ffffffff81914111 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90ab7590 R15=0000000000000000 RIP=ffffffff8b94b68f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055ae743e40e0 CR3=0000000040bce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef43d7680 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef43d7806 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef43d7806 00007ffef43d780c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff18c212e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff18c212e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff18c212e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff18c212e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff18c212f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff18c212fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c215 RDI=ffffffff9b118120 RBP=ffffffff9b1180e0 RSP=ffffc9000411f0e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9b1180e0 R15=ffffffff8564c1b0 RIP=ffffffff8564c23f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007feafdb956c0 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007feafdb94f98 CR3=000000003857a000 CR4=00352ef0 DR0=0000000000000006 DR1=00000000000007ff DR2=0000100000000006 DR3=0000000000000002 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe98facca6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe98facca6 00007ffe98faccac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafce12e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafce12e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafce12e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafce12e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafce12f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafce12fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafcfa74a8 00007feafcfa74a0 00007feafcfa7498 00007feafcfa7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafdb0d100 00007feafcfa7460 00007feafcfa7478 00007feafcfa74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feafcfa74b8 00007feafcfa74b0 00007feafcfa74a8 00007feafcfa74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000