8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x7e, 0x5, "52e206e6bec862748e2af7a2ba244b36a668bbfae49ec51fd10abba2a4f59bb41d4d34206624d55ec4651f09f8e5d3e9237365b95c1d920d1bd1c1b549245825430424ef993709982b29c1e5cfc5e53b8444a8aedf8d829f24c9519563a4a13d666c7020d4622a1dd1e40002ed5f14003dc689d7c57cfdec02df"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x7ff, 0x5, "3d580a721fbcf009c46c433cd5ff26f0adebbc7be1846cc291a3707abe31ec661b615f5c226f3e06b6264c664579b58b4e2db7152c8fbb74b788675d60cde67fba11793ab5adc9bdbb4e8eeec1b1cbea4d349f089ce41dba0f2cebea4907240249765237fd3c1ab431b1ddc11cc02b9b3eece5e086240ed00af9e7171e048ed7be116f155862446bf7091075295c3c353494e740922811ca649711305f6db5f430d9a64ff5b80a60c414376bde90781a06ebc03e5c8b06855acb6367014ee086508dfb06cbe09ad3b6c84eb248703b29bea762c499ea4b02f5eb5739447008229bca9271deb547675947399277983d695be230bda3bce0dd5fa7975909cb4bfa2e2962439a82beb17cde35fdc75c6fa8272f3ad44fe844f9428a8ee2b19e0d147eaf61bb3926bec420446236247eff24d2fc1c5f091db7c9aa1d56c9c3c14d3fa1effebe46e682717c785cd18f78f9ae121281a9bdd6a63421ca419b1dc0d24ddb48af362999b41d00dfbebfbbd60e6565919eb75c3076cd6908b63eabb9eb930b985d7fa9dabddd289692a13352d4565ac198f3a42f5feba4a95c835efb0e325f2d22bd06c1c35ca7357ee235fd9fc0e13fa054e11297da369f732f3304403a0744b7c001f6ef97b27704ca30b93be739c44169af82ba56af0b8b86191fdf6af1f440a4027a2b6fae6beda75d2c851107357526231937577ad58c9200f972ff69b46ff6dfee92669718c958b8f0f70fa59f929e3c30d31a900d52430ed249320ae9dbc50b52a068c7a50a82eee737f78a43ee659de3a59e24847ecd3ce06d74d9cb8d674d487617af7c21026744b277501fc3f2b3554282e732c07220463b36071c84a166aedf6ba16407179b43b0803898c491ba965c45c1705a7cf0a83d29c7c5eec0279a362df3b66efbb7604439c0c2ad8a0e654f746590f3f36f1ad28f68d4fb4da16eec1a3a33981e3429e55b66ff36bea1237bd288921fc7e95900e83733769d90fbc6c98c13618ff05f9f7f26ec253de510c7fa90998e23cebe91faf8a9d99accf3eeb260c081b4e2565513fed934d3cd14449006c09c4c151320b5ebae856bdf2e79fb6cb1406b22781379ea2af2cb81e674ed31fb80caa69877489da0a55d7ed70389e2dec09ab349fc07d96dad75af575495541edf4ff3f609d3c11cb4cd1be44afee65e16f665794ac856098931232d25d5be47d62acdb23fe1a1b3625d757207be611d2f87cf90ef636642f0d489aaa722f52f47b9b5a8582f2f9953fdb7795b7c8a23a77ffbefcc0f26e424f7dedf63e14a4a7f31bd049fe628bf81f47190d6cbecc262836c68c9e4a1ea7db92448a30de57bceb5de0776c1a41535605856417cb24751db9ef7be657ad5ebd3ce06c830d142510c49dbf2aa17846ccf17a3edf090233bc276a315ecbb919c7dc92bde935cbc43dfb0f188b54121963a949071ebc585a2d14ab4d401f58b02667d7608b09bdfe1746f62b31bbda1ebf4c2707e266536c5b084e280b10cdf0a54e0392db3956d65daba93b4edfc1a12b0f0dbc6030141c63d7b790810093743d8e7523cc5d372f017f0d879b47cc5ff6820b594bded879f8e1bc4c2e48033519e8d488c97ccb4603d5a19c2fa4c4108fc2629136ec8ffb235a0eda0e2731efff0e15c187f0009f1e3606864a5dbb44b723f54f6135e6b4ce775707cf006ecb1354ab313befead3582caa89fd001258be46703b34472ec926af98f87af5968a7f0f7b49c02ec0dc34283db21862b6896126d0533bce63f3e096d8e14b36dc40f7a34671753808416aadd48337ec0b6de3eebb64618c6f4db7808954ceeb477e0385e1063f97ee54d8b2b4b9d0b356b299262433f94c4fd6fd1d30fe1d908e2dfd004896b0ec0f35a946f15dc795ae57ad648ceeb8e731622483010a6b2c631eddfc4356ccdc39e8edb509b2ff3be8ea22206604ea97714dd1390035163de6f91804f94a3c6b86e524627930d60852690cf7591d26f768d4e148757219c68f9b7b8537bbf678da84ea62caac061ff28eb1bd52b5bfede1700565daa31baae64e66ea06529b55a35961a9ab4511da3684926a7527275dc2d350513ba0b0513f2fa148f0f26a874b9a5481251beb748ac665e6a52302626938cbf324feb476a506074f1d1e67e066570fc0e0d743d72efb9800b0b320416e2088212a62dd4683e6f02878ec42b9495a9b97f7f56f004ead7388f9f8c1540d0c0eb83e9b117e1213ef7992b7410d71609b8acc6baf85e74b1f773f27afb32fbb6d0378402970af76344022661474bb7f5d239b8c5e7d35d6c827035213253656fd98f259d247ec1f41f980f11ea8858884d75431e0f05c96354f1cdba08fd7e1ed628a74419408f7b7009a34467dcdc6709a73b441db77aa9a8931a7ec1a953e5c91f34bac9994200d36e12f12e70cf2ef02ed65eae80aecd06243522173cfac3b2df5c99d250f507d76e34e93e293c6b8f1ed6b557471bee203ea27defa826ee4635b23432d5489d47ba82d230301777ec2896f5c6fcb6c2a0c9e8e445ea534de66d8afe7a29232403341eca31b14c65d22ab1772efaf423d7063ad3361827ffa348072faf58abdbcfec2ba17923041243c6a470dc807734acfccde75a50151f7746c07928bd6deee65e8b46fa8048a693196b03c34ee9364efa483f273c262ffe6785a6795fb495ca93d32f9f17a0f19a242d30d38fa7535763d8a3d5e7f7295c5d571d26f2e49a68de5cdb7bfc58128eeb04219fffba65c33ff432b77eff2497194dee0b4fa45a6edd00e7415f382e36654e2779573b640734bcbb68434ee2bff3803a3d1d122f1c9bc7fcdb868e40eb45ecbd1ef8e0c57d6840a360cb7850f3e63f731d51fed3419bfe0a0b97f6cc"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0xec4}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 18:00:46 executing program 2: syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x50, 0x63, 0x32, 0x34]}}}]}}, 0x0, 0x0, 0x0) 18:00:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8992, &(0x7f0000001040)) 18:00:46 executing program 3: sigaltstack(&(0x7f0000000600)={&(0x7f0000000540)=""/132, 0x0, 0x84}, &(0x7f0000000700)={0x0}) [ 429.523234][T17005] fuse: Bad value for 'fd' 18:00:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8912, 0x0) 18:00:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x0, 0x0}) [ 429.593281][ T37] audit: type=1800 audit(1695578446.589:506): pid=17008 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1938 res=0 errno=0 [ 429.601240][ T37] audit: type=1804 audit(1695578446.589:507): pid=17008 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir2708743889/syzkaller.JsFQVw/1144/file0" dev="sda1" ino=1938 res=1 errno=0 [ 429.622188][ T37] audit: type=1804 audit(1695578446.599:508): pid=17008 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir2708743889/syzkaller.JsFQVw/1144/file0" dev="sda1" ino=1938 res=1 errno=0 18:00:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000380)=0xc) ptrace$setsig(0x4203, r1, 0xffffffff, &(0x7f0000000500)={0x0, 0x8001, 0xb91}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresuid(&(0x7f0000000400), &(0x7f0000000440), 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000580)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020}, 0x2020) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r7, 0x0, 0x0, 0x4103fe) sendfile(r5, r6, 0x0, 0xffffffff054) write$cgroup_pid(r7, &(0x7f0000000340), 0x12) gettid() 18:00:47 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socketpair(0x9, 0x0, 0x0, &(0x7f00000001c0)) 18:00:47 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x9}]}) 18:00:47 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x41, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 18:00:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8948, &(0x7f0000001040)) 18:00:47 executing program 1: syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) inotify_init1(0x0) 18:00:47 executing program 3: sigaltstack(&(0x7f0000000600)={0x0, 0x2}, &(0x7f0000000700)={0x0}) 18:00:47 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) [ 430.463619][ T37] audit: type=1800 audit(1695578447.459:509): pid=17031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1938 res=0 errno=0 [ 430.472677][ T37] audit: type=1804 audit(1695578447.469:510): pid=17031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir2708743889/syzkaller.JsFQVw/1145/file0" dev="sda1" ino=1938 res=1 errno=0 [ 430.485144][ T37] audit: type=1804 audit(1695578447.469:511): pid=17031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir2708743889/syzkaller.JsFQVw/1145/file0" dev="sda1" ino=1938 res=1 errno=0 18:00:48 executing program 1: getgroups(0x1, &(0x7f0000000340)=[0x0]) 18:00:48 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400) 18:00:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x894a, &(0x7f0000001040)) 18:00:48 executing program 0: syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) 18:00:48 executing program 1: unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200) 18:00:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045515, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x0, 0x0}) 18:00:48 executing program 2: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000980)) 18:00:48 executing program 1: r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x4}) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 18:00:48 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/fs/bpf', 0x0, 0x0) linkat(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 18:00:48 executing program 3: clock_gettime(0x0, &(0x7f0000000bc0)) 18:00:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x401c5820, 0x0) [ 431.254393][ T37] audit: type=1400 audit(1695578448.259:512): avc: denied { mounton } for pid=17047 comm="syz-executor.1" path="/syzkaller-testdir3126860549/syzkaller.s0hM24/1248/file0" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=sock_file permissive=1 18:00:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 18:00:48 executing program 3: socketpair(0x9, 0x3, 0x0, &(0x7f00000001c0)) 18:00:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x401c5820, &(0x7f0000001040)) 18:00:48 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040), 0xa) 18:00:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8902, 0x0) 18:00:49 executing program 3: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 18:00:49 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x216082, 0x0) 18:00:49 executing program 1: socketpair(0xf, 0x0, 0x0, &(0x7f0000004040)) 18:00:49 executing program 0: select(0x40, &(0x7f00000000c0)={0x1000}, 0x0, 0x0, 0x0) 18:00:49 executing program 1: r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x3000045) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x264, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x224115da}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4f8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x264}}, 0x20000000) r4 = inotify_init1(0x800) inotify_rm_watch(r4, r0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={0x0}}, 0x10008895) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x20012) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x58, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = accept(r5, &(0x7f0000000b80)=@can, &(0x7f0000000c00)=0x80) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r1, 0x706b9ac277f160a1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), 0xffffffffffffffff) r8 = accept4(r5, &(0x7f0000000d80)=@isdn, 0x0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001080)) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000001140), 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x16, 0x0, 0x0, &(0x7f0000000f80)='GPL\x00', 0x7ff, 0xa1, &(0x7f0000000fc0)=""/161, 0x41100, 0x1c, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x4}, 0x8, 0x10, &(0x7f0000001100)={0x0, 0x2, 0xff, 0x1ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000001180)=[r9], &(0x7f00000011c0)=[{0x4, 0x3, 0x1, 0x8}, {0x0, 0x3, 0xf, 0x2}], 0x10, 0x1}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000012c0)) r11 = syz_clone(0x8064000, &(0x7f0000001300)="608fd153e20824f5bc366756c3ef420434019029ff0c4f10819e69a8c7445780aa4817e16ec2f076eef3e68c35d7947a12aba33f6f7713ba1b6b43e6c9e5be621629013c0eb0b5243180f7042889af0a9627f35078", 0x55, &(0x7f00000013c0), &(0x7f0000001400), &(0x7f0000001440)="f4926934847ef36e2c4d0c2ee7133189cff994bd17f91b8941c8155ff65330eca4f7a1ab57ffefedef94449e97352a2e72e9afb61ccea6902d382ac25f1aef7acf8b3b8964dbd4ac441a34c1e61a2037b0cde3aae9c12e64cfe4a3f158b49090a59f1a10efac7ce6154f8b5e97b237f5cf4540b47bb9a7a822d493d0f3d283bd526856ccd21bdae18d810ffac10c38676a128cd8fbb2b2d8b39338513b7657e4929fb2a1e01992cc43cb9806755c60108e36d71dbba458cba09ab9e448083d5f7ecb6bf293dade07b5ee23c8308c394ab4269be9") kcmp$KCMP_EPOLL_TFD(r11, 0x0, 0x7, r4, &(0x7f0000001840)={r10, 0xffffffffffffffff, 0xf882}) 18:00:49 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 18:00:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8942, &(0x7f0000001040)) 18:00:49 executing program 3: sigaltstack(0x0, &(0x7f0000000700)={0x0}) [ 432.143221][ T37] audit: type=1400 audit(1695578449.139:513): avc: denied { accept } for pid=17072 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 18:00:49 executing program 0: fsmount(0xffffffffffffffff, 0x0, 0x101) 18:00:49 executing program 2: syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x10d302) 18:00:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup2(r0, r0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x0, 0x0, "e1182816945417d6fd37002947f73994d5fa3d"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r2, &(0x7f0000001d80)="0a6b27d92b3da5998f857ff3f2686f78b70d", 0x12) 18:00:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x40106614, &(0x7f0000000000)) 18:00:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x7) 18:00:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8993, &(0x7f0000001040)) 18:00:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, &(0x7f0000000880)) 18:00:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000002d00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 18:00:49 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) 18:00:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x891e, &(0x7f0000001040)) 18:00:49 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1000, 0x0, 0x3f}, {}]}) 18:00:49 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, 0x8) 18:00:49 executing program 3: sigaltstack(&(0x7f0000000a80)={0x0, 0x80000003}, 0x0) 18:00:49 executing program 1: unshare(0x2000400) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}}}}]}}, 0x0) 18:00:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 18:00:49 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) read$hiddev(r0, 0x0, 0x0) 18:00:49 executing program 3: unshare(0x2000400) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x0, 0x1}) 18:00:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8929, &(0x7f0000001040)) 18:00:49 executing program 3: syz_open_dev$vcsu(&(0x7f00000001c0), 0xb5, 0x0) 18:00:49 executing program 2: select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1}, &(0x7f0000000180)) 18:00:49 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000004040)) [ 432.543163][ T32] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 432.793146][ T32] usb 6-1: Using ep0 maxpacket: 32 [ 432.913407][ T32] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.918196][ T32] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 432.922388][ T32] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 432.926756][ T32] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 432.930352][ T32] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 433.093935][ T32] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.097681][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.101235][ T32] usb 6-1: Product: syz [ 433.103510][ T32] usb 6-1: Manufacturer: syz [ 433.105635][ T32] usb 6-1: SerialNumber: syz 18:00:50 executing program 2: fsopen(&(0x7f0000000440)='ufs\x00', 0x0) 18:00:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8902, &(0x7f0000001040)) 18:00:50 executing program 3: syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000540)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}, 0x0, 0x0, 0x0) 18:00:50 executing program 0: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000d00)=[{}], 0x1, 0x0, &(0x7f0000000d80), 0x8) 18:00:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0x0) [ 433.881744][T17132] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 18:00:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000bc0), 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 18:00:50 executing program 2: statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@blksize}, {@blksize}, {@default_permissions}], [{@uid_lt={'uid<', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}, 0x0, 0x0, 0x0) 18:00:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 18:00:50 executing program 3: socketpair(0x22, 0x0, 0x0, &(0x7f0000004040)) [ 433.905298][ T32] cdc_ncm 6-1:1.0: bind() failure [ 433.909847][ T32] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 433.911457][T17138] SELinux: security_context_str_to_sid () failed with errno=-22 [ 433.912366][ T32] cdc_ncm 6-1:1.1: bind() failure [ 433.926133][ T32] usb 6-1: USB disconnect, device number 13 18:00:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000100)={&(0x7f0000000fc0), 0xc, &(0x7f0000001380)={&(0x7f0000001140)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xcd4fc3f152e974f2, 0x2, 'geneve1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xffffffffffffff09}}, 0x0) 18:00:50 executing program 1: epoll_create(0x517) 18:00:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001140)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}}, 0x0) 18:00:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 18:00:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80085504, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x0, 0x0}) 18:00:50 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=[&(0x7f0000000140)='[#\'#\x8a*\x00', &(0x7f0000000180)='batadv0\x00'], 0x1000) 18:00:50 executing program 2: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001400)={0xec4, r0, 0x421, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xea8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xea1, 0x4, "9098a2a6c870d701185aeae201709af2a33bb3b30259a18555e9973676d40e28c23534a0e6228215894faeb1e1f4c6f8dcbe51a62b5bdb79dfe489e91baea481e95343f534805ea7b90428a5808f4c19f7a46ff26090ab8ca0a7d2b7e8479f714a58913aa1bb97858ed17c10b8cc9538351f2392dda7f686c6365c01922ed91f1540604200bbc222ade5d98148d5e89f5790b2056bb835a276a2ce1957ba9d7f9589602c794563c70f1492325a46569e891bd54f5b128e4dca26bc3b4cb6885c77e7a16d20574e9852b6c5a29452a922cdfc7be34572d1fca63e6557a0d6472bb5acc9a52ed329cb6e3081956bd6d4de5e4a6fdcf585d108fd11a9751e50156c3c8e24aa703f565909aaa36202817db5371de89fb5386a04c4a6a842ed2757fc4c8be2b023743a99c636bbc2d2b3cf418df7a6cdfd7786e7d962e977759f5bfc8ef2b582dd1b7fb539f538d3b7091fe6c0a3389576470d405703c15a784b11488dfecf5154102076ca034fdcb8fce9c71ffe5df81090c46012966f5bf0b736f122f3fd79ffa03b605cb438c7f0c9f5f167fd08798455957f55a65be6a17cf0004cc7f4b6c021de9afeaad3ec62bfd1db1a17808ca57de5af4d54e5f46c49b32e3af3cf48491e9fbcd36703ae7062ddb3e1e7436ce695456ae9911e08d4d525321af618dea6c094d2d43cbf216491538c1789f3237a752fded35f20b46612313c31ee34ebd811fa31b60efc36621aa27f33e86e01bcee8e97e8cf629112d481ceec10da4a9a5c6d51786463213e9b2eaa51b8b2465c8c9777bfc22b66c385c7e75510d40ce48386fccbb273dc22c25c0625af8f4cd1ceb379ee06e01d7d02d1b07e634900064d49259a41e6c3ca123db48440b1d2aaf59576606239c5b1c725acfd549f441b93a64eafc147504fb7af13af739a29d4da1a1a45e69e5475954bdf45aaf33cfae2fd4f847e4cdb76ed96e7a5bbba54466cae7f41d061bb3301301b34ab5222473d037381c9659ec00281e94d5d86acf040a566f32f6895dd4a81f2f341294428a8b7f34fc31267debc757cc2cdfb8497dc630b75a25517db0111e91677b66c69dd3c3ef366927bfabdb1ba58063e90fe675fc457724948edea771a66d5558e580a86e14dae72f7e3bbf64eca68f41fbc6c591390debb04f785c7e3571b5de11a855805a74157963d98632532c4ecc992b58b830d7528912c382f99954a5a008c2727bd249268e39ffbb808cd6703ff3970510dcb4384d3ea220f8a4067f1d546e48f5bad1b240c798108b3a4a3229dbca27b7fb09938bdf0aab43e0565f57745539053107db9565d947c0b827d4069840723545245d8c426873623e6750c0e6467e2798290ac1ab71dc9501a91a462b20c9d1609f0245655f7f3a3dd4ad7854d2ba0011a2bf7595fd23ce8effcbbae9abd280c99aaaab3e3cebdc144b683bca5757661b5488eb7d6addd2c0096035bea4e8d8993d95afec4aeebebae284f87ae9e23322b5a21baabca9d5802aa423c239d7570726cb646cd08ed1144e3479be0513f2d504f0020964b12de6d4a3fd75649642b65c7f5bea86ed5941467b0c5db8ce7429209ac8aaccfb76282034b16ee1abf108c87237bb720c9a419a8b19e5ca6c2ca712f64c26f18cd6142f2ae4d61de5c4f1dd881e89140695dc378b00620429e473123755a804db1daee95b2c645f9cd7f5af09b37592e45fb6fcc7e46b7cd2dbd963908a3d7643bba649847b704fade42dbbc565ee1ddc9c6a5bad6c0f6585a4dd75141740d050aa3177774ab606746e6e8b9806deeabb28192e338b591970dac8be68620a179b6627cfe0aca2853f4b8311604c2b907c811d852b84b99edc20e53f9771b014698384934d43fc75404166294f0fe052cbc919a2cef6ae5db90c53384d395034385afde4067de78435db5d0a566dc21a734285623b7a8b593885791f743ef7b59292e9b53f7ae2c3a513eb4db52997523ea1e38d891a42175fb0cbfff7f0736ae6f940c0ec86e0bb5ba52a92d345c4836fc247ca0d4c8d2b9e40391756fbf81f4669b22b04242bcacc6abbc5ab5a292afe7462448953eee6db6f211c2d33a331136126272ccb7b608dbf9011b0cf3c6e6ee7b21556d8d9c94558b5effc9cfdfea906d69c757926371d70ae7100f321ec14410080cefb9fef0ba5663a10fdd026bb634ffd24cbdbdb4ec60f263aaaca7d79d9dd7890c6f310bcd7749de31bcdf8257e3a37db56b573603ccfe784fcc12f4ea758320ba216b68551f4259ed50d14114ac8d55da89280ee72a70dd38b663c004ca6661fc0d53eea413fe5f5d3d89ffd334be5a7fa1f7421d1b30ecf6089e6644d856ebdba64d4f6d7c99d596fd63137becc87a14b54196e56e7875454d1024bfb37853a9a8c04ae30aa2a94ecaa75a156a6fbb772b1136e549cb8633172e56897b02d2751dcea3ee58b569e562724a116a4a705f8459ad7e4379343e8a5bfdb54fba1310285e79d34d2866dd7c0b9348316ecfa2cf6cf8e37364e0e85a10484753e61ace78d402b8092e5d6b8f80d09b32a5bbd335b2cc6f1546fed9680b476626017d18038bea728399fb068111e29101351e401169104ea834a03c1299a949fc9e793eacc3b284da1d3fec5dd21d9701edf7cb1a89b24e3ed8c2c7dcfb83c3a78fc60a6b2135ba7310f6fed9301a2381c9702b256148a7d629022116445210ab8777a5188fb9507115a707f74e369f8e0c2b2ba3fa5166cf118ad49b2920a41518b7e5fa90d25b19f24c0a499096d49df4df3121ec1d00b4b009857072db826c8d27642dbf998e76410e75af71578525cefa81a15820e2a33407025b855d684a42dc1481f955ba3d42f93b7538ca91c25d82821bde18cc7c7b5cc226b208b8c4d14297758850fb75e9d39f694f76e36a03285c8a249aae7564e400fe3e6717c07b3bf9c2a368be80d71a390c79425ac898cd35cf0c66e3739ea6eecd68005db256a3acdca5bf9baca8fd701bfc2917b3c4f50ba11d9bbd6bea2d720b1e162da00edcb0ca0a4408b2dfe79fc947b2b7c27adc84c7200d95add6bba3a5b0cdb8fb0bd6e05d312ec0f0b45abe01999c35b4283de2fd4f92854fe964741aec38ac22aec64d960c5070a829ffdaa5dd3ecc326bf3410d0878fdcbf62b026e0a95603afef1ec85109130fe130d470e6f461041c60dc95c70dcb5be6238161415b630db10aaa0cef0c59c7c78ca05666e014931c456915617dfc333b388464b99f87e0915072b4266c2236e25c9276a80c8722880496ea9ac6e9ac6fb1deacdc0d9f1e63c79462b2e13f363de4a46724850d26131dbbf537021ab38b516a594092f9114dca9f69348e0b40bd97c22fa60b031cb82f87219d48932008d90588064447dfdcd926ee0a3d6a5ecc855bcf2dcba49d35be21163977a594fb1b94fab11aed8b84093e00fb292902ea8dd3db48841cfed194be7496e7fd7f491f16d58aae399d42e66e9a5b0d36da38fd6c147378439991a7ae1d6495a8e486bf1dbd528a1e65bf9755e6242c3eb0ec2f50533892d1629ab2a164eceb8675a0135248b6080f198b86c255815c14dca666a30644bb4443c063c4d9b205794ae064c662e86131762e8a951222973f8b67fbdd1d7e16d9572e9472918606777d378aa3999460334004fe5772d423ae4dcd571cc5b2545ffbfe0be1a9e4b11b6276ae1a5ccd0b09a143e465cb9a82a5eee31f18bde5e9bf1ef975ec4d5ac155c2f689ca2d5021875020e1a6efb69cffe1cd32cfaa8f647ae8126291d937b514c09d0c853fb5af37bc50e55a4b4cb55fb316aeac6c9ed6b7670867562ec7695062fd596aaa5b4e6f42591c6288c09092c7ff1010d6981c1965ec93a0807416d3e58d001e2e05e65254876cb45ec1a510d6e300bba2387e06360377d3d7e6fd870c2c9659bb501412821008b88477c8ea91cb5c036be2895341ad59a6974eb9b10372fda841d9df7d7f30354d259eb90ffbeade1f2436d5345825529b7599a263fefe1822cdb6c42a89463d6cd3aa991668be1bfb8a8df5744fa0d1841e70af7f84715eb85e2115521106a818c0b63e88e2ff16f4713cd19e25f6bd09d74986b5e1276783c24d6dda506f7c3a12b97cf8381f98f06229d7541f64c7dc31a690396f939befaba81e82eebfa6d554ba66eb52b53173b9c4b2c55ada1cda915d6778eb0470f7fd0f87f8052197c09abcc2ba1dfabf7910b56e5b2761e04dffc153b0ab910498271aeffbf63f1381aacdee65907ae8df3be9ba739802a882edc6673a1be277fb6cbd16099a4f3178def110007189f061923f7d02f426de7d5f6c753823a0e2318e1a1c2696381be401948583fa00df121bba1d691f26de42a1bb47ad96baf89b71ae453ae3ff8b38bfa1c863501e4e6b5b509836c53be7a249bf211eb67c0064b1828d1effd66337157a858c25eb14550d0975692284cb71dac62f896947c579ece26e57cca09bcf2c7e89122ddd0474f1e926b4f8f4e21db01920fa3fb2c32284d26d17590dbc3ab05544ee06b6a051a1f0081a70fa9150ba05d5d95200cf8e30b4de64093f3fd8751403565bfa1d2eddd6be96f17b1de51b5c0295a0a7c4ecc9424cce8c1918cff49cc1357dde60af178b85c81e68d0ecb95fe2af029d002884eb1166d47d6ce3cf93161a40ba9ee49a43748d01f1a560404851730dcaf4aacce0aecf6c0099574de00f3d3733b1b8c9aa33721339d8ac5818786b00fa1f0d17f21c61e08bdb2d0446dc1e90a766aac3ffa48b4e6bd3532fbd28c48fe667f9cb7f732a56cde47c2a12a9b2ea128f7c474ae5decc498d0a85cf2b88ff1393563edc86e49957c1f11093d62b744766e9b0c216c68d1f4c0158ded2780035ffc23bb613a00b3661b5b8593f99a85bbe4db08a46bcc83a91daab5fd4c95f557f0e82b752191129036206e89eb8c8690540cb1252f45ab6391721fbd9e47db37def7c4ba11f067db530ae98544aa54998271690965c2343e54a6694d630d919be0c57360e7477c53e25a7203b35543400c9ed37a06c30e157fe41371bf12eb1b28be4123b79bea9b2302d12f26f6dcd3405502b3bc6315c4e89289190aade4bdbe8c3b9a629b126cb836a368e08e5e9c95ae6c275a474990eb8e37b70f8011892d367e9f93eca7fe4b2543fcdaa5e80580a3948826751254b33d89f5acd53cc440d8653618c06e82d8eaf0b432589de25bf104c45a60b77aa63bc58317cd66cd2d887f60cfab608580bb3114232965ea15b22c3ecd8dbe2d8ab74d977f605a8b06fd04d9"}]}]}, 0xec4}}, 0x4008040) 18:00:50 executing program 1: sigaltstack(&(0x7f0000000600)={0x0}, &(0x7f0000000700)={0x0}) [ 433.978185][T17154] usb usb5: usbfs: process 17154 (syz-executor.0) did not claim interface 0 before use 18:00:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x200402, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:00:50 executing program 0: statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x80080, &(0x7f0000000200)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) 18:00:50 executing program 3: clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) select(0x40, &(0x7f0000000b00), 0x0, 0x0, &(0x7f0000000c00)={r0, r1/1000+10000}) 18:00:51 executing program 2: syz_open_dev$loop(&(0x7f0000000bc0), 0x8, 0x8040) [ 434.002561][ T37] audit: type=1400 audit(1695578450.999:514): avc: denied { read } for pid=17160 comm="syz-executor.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:cert_t:s0" [ 434.013757][ T37] audit: type=1400 audit(1695578450.999:515): avc: denied { open } for pid=17160 comm="syz-executor.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:cert_t:s0" 18:00:51 executing program 0: unlinkat(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x0) 18:00:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x200402, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x10000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:00:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5452, 0x0) 18:00:51 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0xb7}}) 18:00:51 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000001140)={0x73d2, 0x1, [{}]}) 18:00:51 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5}) 18:00:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x4020940d, &(0x7f0000001040)) 18:00:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0, 0x40}}, 0x0) 18:00:51 executing program 3: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1a) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ftruncate(r1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004640)='fd\x00') getdents64(r2, &(0x7f0000002140)=""/4096, 0x1000) mmap(&(0x7f0000830000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xfc0a8000) 18:00:51 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)='3', 0x1}, {&(0x7f0000000140)='\x00', 0x1}], 0x2) 18:00:51 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='3', 0x1}, {&(0x7f0000000180)='A', 0x1}], 0x2) 18:00:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="d082cebe62f8bfc31d212705fbb8b8490368ebf2badf50c137ba67e1476b095abebd68767f5718b4450c0d55c638c7dbc716f770a25a13e0bd7ae182a0d8e75bb0919436a66e9c5b007cc721a674acb115e2e64f5bf06ac68225c489b28698bf03cc6ff681707d0647", 0x69}, {&(0x7f0000001340)="b8effb5a036b1dfd457b349b5749c95ec834dceb1d4d201f1a60e5489f4204ad87934e3898e5c7f69f77081a9622c251a4d22d30c33ba6a307258582455d17eb41d7c8c58784266fb3f9979da9a238fffdd1a5f864c10dfe71629bd95bf42b8135198f24f99083a051c29ba7683279131e562d15d2607e2cd4950d1839bf90aa66d8f6ec12a32f0fe7cd025050e09c06166adb081306d2f32e6dc4251a440303a8a59b5b22f232c4505d2526e7f2cc6abc5551b8e91915a32b23d0209fc8", 0xbe}], 0x2}}], 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xd, &(0x7f0000000300)=@raw=[@generic={0x1, 0x6, 0xf, 0x8000, 0x3}, @alu={0x0, 0x1, 0xc, 0xa, 0x3, 0xffffffffffffffc0, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb}, @generic={0x85, 0xd, 0x0, 0x9, 0xffff}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x1, 0x1, 0x0, 0x9, 0xffffffffffffffff}], &(0x7f0000000400)='GPL\x00', 0x0, 0xc5, &(0x7f0000000640)=""/197, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x1, 0x5, 0x357}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x4, 0x1, 0xf, 0xc}, {0x2, 0x4, 0xe, 0x6}, {0x3, 0x5, 0x3, 0x1}, {0x3, 0x2, 0x7, 0x5}, {0x5, 0x4, 0x7, 0xb}, {0x5, 0x5, 0xa, 0x5}, {0x5, 0x3, 0xf, 0x6}], 0x10, 0x40}, 0x90) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffdd2, 0x8055, 0x0, 0x0) 18:00:51 executing program 0: clock_adjtime(0x0, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x6}) 18:00:51 executing program 3: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1a) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ftruncate(r1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004640)='fd\x00') getdents64(r2, &(0x7f0000002140)=""/4096, 0x1000) mmap(&(0x7f0000830000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xfc0a8000) 18:00:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000002d00)={&(0x7f0000002b40), 0xc, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x14, 0x0, 0x4}, 0x14}}, 0x40) 18:00:52 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045519, 0x0) 18:00:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8930, &(0x7f0000001040)) 18:00:52 executing program 3: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1a) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ftruncate(r1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004640)='fd\x00') getdents64(r2, &(0x7f0000002140)=""/4096, 0x1000) mmap(&(0x7f0000830000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xfc0a8000) 18:00:52 executing program 0: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ftruncate(0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004640)='fd\x00') getdents64(r3, &(0x7f0000002140)=""/4096, 0x1000) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002140)=""/4096, 0x1000) 18:00:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x14, r1, 0x1}, 0x14}}, 0x0) 18:00:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8943, &(0x7f0000001040)) 18:00:52 executing program 3: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1a) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ftruncate(r1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000004640)='fd\x00') getdents64(r2, &(0x7f0000002140)=""/4096, 0x1000) mmap(&(0x7f0000830000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0xfc0a8000) 18:00:52 executing program 1: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) 18:00:52 executing program 2: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus\x00', 0x0) 18:00:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x40087602, 0x0) 18:00:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000000c0)={0x0, "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"}) [ 435.164696][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 435.164704][ T37] audit: type=1400 audit(1695578452.169:517): avc: denied { setattr } for pid=17224 comm="syz-executor.1" path="socket:[44539]" dev="sockfs" ino=44539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 18:00:52 executing program 1: syz_usb_connect$uac1(0x0, 0x94, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, '>'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, '\b\x00g', "b51b"}, @format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 18:00:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000004040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) pwritev2(r5, &(0x7f0000000380)=[{&(0x7f00000002c0)="71485c66c1e81f100e675d330447f02ab453a5bfde86d6d12f2433523c52ba1a8cac63354c95b99603a3bce6c6abd31f37b65e974bb95414fb0d1d3db2ad2564ce2ca11851dbb720bc9394f412515b99faad24e4de4e58d8742d23a32e9609d7eb1e8da7214a3df3e4f7", 0x6a}, {&(0x7f0000000240)}], 0x2, 0x0, 0x3ff, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) fadvise64(r7, 0x9, 0xfffffffffffff5b6, 0x4) sendfile(r4, r6, 0x0, 0x4000000000010046) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) close(r8) syz_clone3(&(0x7f0000000c00)={0x200004000, &(0x7f00000001c0), 0x0, &(0x7f00000005c0), {}, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x8000002}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 18:00:52 executing program 0: eventfd(0x0) eventfd2(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 18:00:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8906, 0x0) 18:00:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00'}) 18:00:52 executing program 0: socketpair(0x1f, 0x0, 0x0, &(0x7f0000004040)) 18:00:52 executing program 3: openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x0) 18:00:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) [ 436.183161][ T1673] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 436.433176][ T1673] usb 6-1: Using ep0 maxpacket: 32 [ 436.553262][ T1673] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 436.556665][ T1673] usb 6-1: config 1 has no interface number 1 [ 436.558938][ T1673] usb 6-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 436.562466][ T1673] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 436.567400][ T1673] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 436.733195][ T1673] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.736618][ T1673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.739614][ T1673] usb 6-1: Product: syz [ 436.741215][ T1673] usb 6-1: Manufacturer: syz [ 436.742982][ T1673] usb 6-1: SerialNumber: syz [ 437.089603][ T1673] usb 6-1: USB disconnect, device number 14 [ 437.110379][T17129] udevd[17129]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 18:00:54 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0185502, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x0, 0x0}) 18:00:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x551f, 0x0) 18:00:54 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0xffffffffffffffff) 18:00:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5460, 0x0) 18:00:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="81cfd637c067a8eb069bc70f46653969d4320d5b20e58c8465d3f01d41d2cafd0faa99ccb0b61bfd0f2b41988c60e749ddc437d84113c953000000802b0d3de4393b58db6ae573ff9e21bfe6912e1afd6391d4c3bedf", 0x56}, {&(0x7f0000000380)="d082cebe62f8bfc31d212705fbb8b8490368ebf2badf50c137ba67e1476b095abebd68767f5718b4450c0d55c638c7dbc716f770a25a13e0bd7ae182a0d8e75bb0919436a66e9c5b007cc721a674acb115e2e64f5bf06ac68225c489b28698bf03cc6ff681707d0647", 0x69}, {&(0x7f0000001340)="b8effb5a036b1dfd457b349b5749c95ec834dceb1d4d201f1a60e5489f4204ad87934e3898e5c7f69f77081a9622c251a4d22d30c33ba6a307258582455d17eb41d7c8c58784266fb3f9979da9a238fffdd1a5f864c10dfe71629bd95bf42b8135198f24f99083a051c29ba7683279131e562d15d2607e2cd4950d1839bf90aa66d8f6ec12a32f0fe7cd025050e09c06166adb081306d2f32e6dc4251a440303a8a59b5b22f232c4505d2526e7f2cc6abc5551b8e91915a32b23d0209fc8", 0xbe}], 0x3}}], 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x400800, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={r1, 0x7, 0x0, 0xfffffffffffff000}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x268, 0x0, 0x0, 0x148, 0x138, 0x148, 0x1d0, 0x240, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'ip6gretap0\x00', 'wg1\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xd, &(0x7f0000000300)=@raw=[@generic={0x1, 0x6, 0xf, 0x8000, 0x3}, @alu={0x4, 0x1, 0xc, 0xa, 0x3, 0xffffffffffffffc0, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb}, @generic={0x85, 0xd, 0x0, 0x9}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x1, 0x1, 0x0, 0x9, 0xffffffffffffffff}], &(0x7f0000000400)='GPL\x00', 0x0, 0xc5, &(0x7f0000000640)=""/197, 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x1, 0x5, 0x357}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[r3, r6], &(0x7f0000000580)=[{0x4, 0x1, 0xf, 0xc}, {0x2, 0x4, 0xe, 0x6}, {0x0, 0x0, 0x3, 0x1}, {0x3, 0x2, 0x7, 0x5}, {0x5, 0x4, 0x7, 0xb}, {0x5, 0x5, 0xa, 0x5}, {0x5, 0x3, 0xf, 0x6}], 0x10, 0x40}, 0x90) accept$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000000)=0x2) sendto$inet(r2, &(0x7f0000000800)="bf387254894e80d78542f72d8e5366160047b5c359ec5e3bb919c55248b22589f3bb7810b3db74d07e0c4c1f354fc88aa6c33e366501b567aed12b03492559a48ba33de3fa2e4cfcb0f383b67863d8717091", 0x52, 0x8000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$netlink(0x10, 0x3, 0x12) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffdd2, 0x8055, 0x0, 0x0) 18:00:54 executing program 1: socketpair(0x28, 0x0, 0x2, &(0x7f0000000000)) 18:00:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="81cfd637c067a8eb069bc70f46653969d4320d5b20e58c8465d3f01d41d2cafd0faa99ccb0b61bfd0f2b41988c60e749ddc437d84113c953000000802b0d3de4393b58db6ae573ff9e21bfe6912e1afd6391d4c3bedf", 0x56}, {&(0x7f0000001340)="b8effb5a036b1dfd457b349b5749c95ec834dceb1d4d201f1a60e5489f4204ad87934e3898e5c7f69f77081a9622c251a4d22d30c33ba6a307258582455d17eb41d7c8c58784266fb3f9979da9a238fffdd1a5f864c10dfe71629bd95bf42b8135198f24f99083a051c29ba7683279131e562d15d2607e2cd4950d1839bf90aa66d8f6ec12a32f0fe7cd025050e09c06166adb081306d2f32e6dc4251a440303a8a59b5b22f232c4505d2526e7f2cc6abc5551b8e91915a32b23d0209fc8", 0xbe}], 0x2}}], 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x400800, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={r1, 0x7, 0x0, 0xfffffffffffff000}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x268, 0x0, 0x0, 0x148, 0x138, 0x148, 0x1d0, 0x240, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'ip6gretap0\x00', 'wg1\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xd, &(0x7f0000000300)=@raw=[@generic={0x1, 0x6, 0xf, 0x8000, 0x3}, @alu={0x4, 0x1, 0xc, 0xa, 0x3, 0xffffffffffffffc0, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb}, @generic={0x85, 0xd, 0x0, 0x9, 0xffff}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x1, 0x1, 0x0, 0x9, 0xffffffffffffffff}], &(0x7f0000000400)='GPL\x00', 0x0, 0xc5, &(0x7f0000000640)=""/197, 0x41000, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x1, 0x5, 0x357}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[r2], &(0x7f0000000580)=[{0x4, 0x1, 0xf, 0xc}, {0x2, 0x4, 0xe, 0x6}, {0x3, 0x5, 0x3, 0x1}, {0x3, 0x2, 0x7, 0x5}, {0x5, 0x4, 0x7, 0xb}, {0x5, 0x5, 0xa, 0x5}, {0x5, 0x3, 0xf, 0x6}], 0x10, 0x40}, 0x90) accept$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000000)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000000)=0x2) sendto$inet(0xffffffffffffffff, &(0x7f0000000800)="bf387254894e80d78542f72d8e5366160047b5c359ec5e3bb919c55248b22589f3bb7810b3db74d07e0c4c1f354fc88aa6c33e366501b567aed12b03492559a48ba33de3fa2e4cfcb0f383b67863d8717091", 0x52, 0x8000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffdd2, 0x8055, 0x0, 0x0) 18:00:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x4008550c, 0x0) 18:00:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'sit0\x00', 0x0}) [ 437.551841][ T37] audit: type=1400 audit(1695578454.549:518): avc: denied { map } for pid=17252 comm="syz-executor.3" path="socket:[44578]" dev="sockfs" ino=44578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 18:00:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8932, &(0x7f0000001040)) [ 437.563839][ T37] audit: type=1400 audit(1695578454.549:519): avc: denied { read } for pid=17252 comm="syz-executor.3" path="socket:[44578]" dev="sockfs" ino=44578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 437.566913][T17253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.567164][T17258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.576689][T17258] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 437.689037][ T37] audit: type=1400 audit(1695578454.689:520): avc: denied { create } for pid=17252 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 18:00:55 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @private2, 0x1ff}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x80, {{0xa, 0x4e21, 0x5, @private2, 0x200}}}, 0x88) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x40, {{0xa, 0x4e23, 0x1, @mcast1, 0x6}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5e2c1480}}, {{0xa, 0x4e21, 0x833, @empty, 0x4}}]}, 0x190) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) pwrite64(r0, 0xfffffffffffffffe, 0x0, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000380)={0x25, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x40, 0x7, [0x4, 0x7, 0x3462, 0x81, 0x7, 0x9, 0x1]}}, @pad1, @jumbo={0xc2, 0x4, 0x3800000}]}, 0x58) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000440)={0xec, {{0xa, 0x4e21, 0x6, @private2, 0x10001}}}, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@dev, @in6=@private2}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000640)={0x7, {{0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}]}, 0x110) sendfile(r0, r1, &(0x7f0000000780)=0x9, 0x1e) close_range(0xffffffffffffffff, r0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x2, &(0x7f00000007c0)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2c, r3, 0x8, &(0x7f0000000880)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x10, 0x8, 0x2e}, 0x10, 0xffffffffffffffff, r0, 0x5, 0x0, &(0x7f0000000900)=[{0x2, 0x2, 0xb, 0x8}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x3, 0xa, 0x6}, {0x0, 0x3, 0x6, 0x9}, {0x3f, 0x1, 0xa, 0x9}], 0x10, 0x1}, 0x90) syz_open_procfs(0x0, &(0x7f0000000a40)='net/tcp6\x00') splice(r4, &(0x7f0000000a80)=0xf4, r3, &(0x7f0000000ac0)=0x1ff, 0x44d, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000b00)={0x0, {{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x1000, @loopback, 0xbb2}}, {{0xa, 0x4e22, 0x3, @private0, 0x9}}, {{0xa, 0x4e23, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb08b}}]}, 0x210) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d40), 0xc000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000d80)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000dc0), 0x800, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x10000, &(0x7f0000001040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@nodevmap}, {@fscache}, {@cache_mmap}], [{@audit}]}}) 18:00:55 executing program 2: sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) 18:00:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105502, 0x0) 18:00:55 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="81cfd637c067a8eb069bc70f46653969d4320d5b20e58c8465d3f01d41d2cafd0faa99ccb0b61bfd0f2b41988c60e749ddc437d84113c953000000802b0d3de4393b58db6ae573ff9e21bfe6912e1afd6391d4c3bedf", 0x56}, {&(0x7f0000000380)="d082cebe62f8bfc31d212705fbb8b8490368ebf2badf50c137ba67e1476b095abebd68767f5718b4450c0d55c638c7dbc716f770a25a13e0bd7ae182a0d8e75bb0919436a66e9c5b007cc721a674acb115e2e64f5bf06ac68225c489b28698bf03cc6ff681707d0647", 0x69}, {&(0x7f0000001340)="b8effb5a036b1dfd457b349b5749c95ec834dceb1d4d201f1a60e5489f4204ad87934e3898e5c7f69f77081a9622c251a4d22d30c33ba6a307258582455d17eb41d7c8c58784266fb3f9979da9a238fffdd1a5f864c10dfe71629bd95bf42b8135198f24f99083a051c29ba7683279131e562d15d2607e2cd4950d1839bf90aa66d8f6ec12a32f0fe7cd025050e09c06166adb081306d2f32e6dc4251a440303a8a59b5b22f232c4505d2526e7f2cc6abc5551b8e91915a32b23d0209fc8", 0xbe}], 0x3}}], 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x400800, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={r1, 0x7, 0x0, 0xfffffffffffff000}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x268, 0x0, 0x0, 0x148, 0x138, 0x148, 0x1d0, 0x240, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'ip6gretap0\x00', 'wg1\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xd, &(0x7f0000000300)=@raw=[@generic={0x1, 0x6, 0xf, 0x8000, 0x3}, @alu={0x4, 0x1, 0xc, 0xa, 0x3, 0xffffffffffffffc0, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb}, @generic={0x85, 0xd, 0x0, 0x9}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x1, 0x1, 0x0, 0x9, 0xffffffffffffffff}], &(0x7f0000000400)='GPL\x00', 0x0, 0xc5, &(0x7f0000000640)=""/197, 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x1, 0x5, 0x357}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[r3, r6], &(0x7f0000000580)=[{0x4, 0x1, 0xf, 0xc}, {0x2, 0x4, 0xe, 0x6}, {0x0, 0x0, 0x3, 0x1}, {0x3, 0x2, 0x7, 0x5}, {0x5, 0x4, 0x7, 0xb}, {0x5, 0x5, 0xa, 0x5}, {0x5, 0x3, 0xf, 0x6}], 0x10, 0x40}, 0x90) accept$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000000)=0x2) sendto$inet(r2, &(0x7f0000000800)="bf387254894e80d78542f72d8e5366160047b5c359ec5e3bb919c55248b22589f3bb7810b3db74d07e0c4c1f354fc88aa6c33e366501b567aed12b03492559a48ba33de3fa2e4cfcb0f383b67863d8717091", 0x52, 0x8000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$netlink(0x10, 0x3, 0x12) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffdd2, 0x8055, 0x0, 0x0) [ 438.266520][ T37] audit: type=1400 audit(1695578455.269:521): avc: denied { mounton } for pid=17267 comm="syz-executor.1" path="/syzkaller-testdir3126860549/syzkaller.s0hM24/1271/file0" dev="sda1" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 18:00:55 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)='3', 0x300}, {&(0x7f0000000140)='-', 0x1}], 0x2) [ 438.317123][T17274] xt_CT: You must specify a L4 protocol and not use inversions on it 18:00:55 executing program 0: socketpair(0x27, 0x0, 0x0, &(0x7f0000004040)) 18:00:55 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000003380), 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000035c0), r0) 18:00:55 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @private2, 0x1ff}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x80, {{0xa, 0x4e21, 0x5, @private2, 0x200}}}, 0x88) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x40, {{0xa, 0x4e23, 0x1, @mcast1, 0x6}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5e2c1480}}, {{0xa, 0x4e21, 0x833, @empty, 0x4}}]}, 0x190) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) pwrite64(r0, 0xfffffffffffffffe, 0x0, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000380)={0x25, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x40, 0x7, [0x4, 0x7, 0x3462, 0x81, 0x7, 0x9, 0x1]}}, @pad1, @jumbo={0xc2, 0x4, 0x3800000}]}, 0x58) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000440)={0xec, {{0xa, 0x4e21, 0x6, @private2, 0x10001}}}, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@dev, @in6=@private2}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000640)={0x7, {{0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}]}, 0x110) sendfile(r0, r1, &(0x7f0000000780)=0x9, 0x1e) close_range(0xffffffffffffffff, r0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x2, &(0x7f00000007c0)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2c, r3, 0x8, &(0x7f0000000880)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x10, 0x8, 0x2e}, 0x10, 0xffffffffffffffff, r0, 0x5, 0x0, &(0x7f0000000900)=[{0x2, 0x2, 0xb, 0x8}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x3, 0xa, 0x6}, {0x0, 0x3, 0x6, 0x9}, {0x3f, 0x1, 0xa, 0x9}], 0x10, 0x1}, 0x90) syz_open_procfs(0x0, &(0x7f0000000a40)='net/tcp6\x00') splice(r4, &(0x7f0000000a80)=0xf4, r3, &(0x7f0000000ac0)=0x1ff, 0x44d, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000b00)={0x0, {{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x1000, @loopback, 0xbb2}}, {{0xa, 0x4e22, 0x3, @private0, 0x9}}, {{0xa, 0x4e23, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb08b}}]}, 0x210) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d40), 0xc000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000d80)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000dc0), 0x800, 0x0) r7 = dup(r6) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000e00)={"db4f724d5a3e1178c4a43a3dff012b7ddddf5c8ed0e602b0b20b1857ff9ffa0e", r7, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f0000000e40)={{r8}, {@void, @max}}) mount$9p_fd(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x10000, &(0x7f0000001040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@nodevmap}, {@fscache}, {@cache_mmap}], [{@audit}]}}) [ 438.344346][T17274] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 438.462845][ T37] audit: type=1400 audit(1695578455.459:522): avc: denied { ioctl } for pid=17280 comm="syz-executor.2" path="/dev/uhid" dev="devtmpfs" ino=1112 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 440.025250][ T1351] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.027670][ T1351] ieee802154 phy1 wpan1: encryption failed: -22 18:01:50 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @private2, 0x1ff}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x80, {{0xa, 0x4e21, 0x5, @private2, 0x200}}}, 0x88) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x40, {{0xa, 0x4e23, 0x1, @mcast1, 0x6}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5e2c1480}}, {{0xa, 0x4e21, 0x833, @empty, 0x4}}]}, 0x190) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) pwrite64(r0, 0xfffffffffffffffe, 0x0, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000380)={0x25, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x40, 0x7, [0x4, 0x7, 0x3462, 0x81, 0x7, 0x9, 0x1]}}, @pad1, @jumbo={0xc2, 0x4, 0x3800000}]}, 0x58) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000440)={0xec, {{0xa, 0x4e21, 0x6, @private2, 0x10001}}}, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@dev, @in6=@private2}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000640)={0x7, {{0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}]}, 0x110) sendfile(r0, r1, &(0x7f0000000780)=0x9, 0x1e) close_range(0xffffffffffffffff, r0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x2, &(0x7f00000007c0)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2c, r3, 0x8, &(0x7f0000000880)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x10, 0x8, 0x2e}, 0x10, 0xffffffffffffffff, r0, 0x5, 0x0, &(0x7f0000000900)=[{0x2, 0x2, 0xb, 0x8}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x3, 0xa, 0x6}, {0x0, 0x3, 0x6, 0x9}, {0x3f, 0x1, 0xa, 0x9}], 0x10, 0x1}, 0x90) syz_open_procfs(0x0, &(0x7f0000000a40)='net/tcp6\x00') splice(r4, &(0x7f0000000a80)=0xf4, r3, &(0x7f0000000ac0)=0x1ff, 0x44d, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000b00)={0x0, {{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x1000, @loopback, 0xbb2}}, {{0xa, 0x4e22, 0x3, @private0, 0x9}}, {{0xa, 0x4e23, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb08b}}]}, 0x210) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d40), 0xc000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000d80)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000dc0), 0x800, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x10000, &(0x7f0000001040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@nodevmap}, {@fscache}, {@cache_mmap}], [{@audit}]}}) 18:01:50 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) fsopen(&(0x7f0000000440)='ufs\x00', 0x0) 18:01:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="81cfd637c067a8eb069bc70f46653969d4320d5b20e58c8465d3f01d41d2cafd0faa99ccb0b61bfd0f2b41988c60e749ddc437d84113c953000000802b0d3de4393b58db6ae573ff9e21bfe6912e1afd6391d4c3bedf", 0x56}, {&(0x7f0000000380)="d082cebe62f8bfc31d212705fbb8b8490368ebf2badf50c137ba67e1476b095abebd68767f5718b4450c0d55c638c7dbc716f770a25a13e0bd7ae182a0d8e75bb0919436a66e9c5b007cc721a674acb115e2e64f5bf06ac68225c489b28698bf03cc6ff681707d0647", 0x69}, {&(0x7f0000001340)="b8effb5a036b1dfd457b349b5749c95ec834dceb1d4d201f1a60e5489f4204ad87934e3898e5c7f69f77081a9622c251a4d22d30c33ba6a307258582455d17eb41d7c8c58784266fb3f9979da9a238fffdd1a5f864c10dfe71629bd95bf42b8135198f24f99083a051c29ba7683279131e562d15d2607e2cd4950d1839bf90aa66d8f6ec12a32f0fe7cd025050e09c06166adb081306d2f32e6dc4251a440303a8a59b5b22f232c4505d2526e7f2cc6abc5551b8e91915a32b23d0209fc8", 0xbe}], 0x3}}], 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x400800, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={r1, 0x7, 0x0, 0xfffffffffffff000}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x268, 0x0, 0x0, 0x148, 0x138, 0x148, 0x1d0, 0x240, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'ip6gretap0\x00', 'wg1\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xd, &(0x7f0000000300)=@raw=[@generic={0x1, 0x6, 0xf, 0x8000, 0x3}, @alu={0x4, 0x1, 0xc, 0xa, 0x3, 0xffffffffffffffc0, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb}, @generic={0x85, 0xd, 0x0, 0x9}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x1, 0x1, 0x0, 0x9, 0xffffffffffffffff}], &(0x7f0000000400)='GPL\x00', 0x0, 0xc5, &(0x7f0000000640)=""/197, 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x1, 0x5, 0x357}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[r3, r6], &(0x7f0000000580)=[{0x4, 0x1, 0xf, 0xc}, {0x2, 0x4, 0xe, 0x6}, {0x0, 0x0, 0x3, 0x1}, {0x3, 0x2, 0x7, 0x5}, {0x5, 0x4, 0x7, 0xb}, {0x5, 0x5, 0xa, 0x5}, {0x5, 0x3, 0xf, 0x6}], 0x10, 0x40}, 0x90) accept$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000000)=0x2) sendto$inet(r2, &(0x7f0000000800)="bf387254894e80d78542f72d8e5366160047b5c359ec5e3bb919c55248b22589f3bb7810b3db74d07e0c4c1f354fc88aa6c33e366501b567aed12b03492559a48ba33de3fa2e4cfcb0f383b67863d8717091", 0x52, 0x8000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$netlink(0x10, 0x3, 0x12) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffdd2, 0x8055, 0x0, 0x0) 18:01:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffe41, 0x0, 0x0, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0) 18:01:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a2, &(0x7f0000001040)) [ 493.340985][T17293] xt_CT: You must specify a L4 protocol and not use inversions on it 18:01:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000bc0), 0x8, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 18:01:50 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @private2, 0x1ff}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x80, {{0xa, 0x4e21, 0x5, @private2, 0x200}}}, 0x88) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x40, {{0xa, 0x4e23, 0x1, @mcast1, 0x6}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5e2c1480}}, {{0xa, 0x4e21, 0x833, @empty, 0x4}}]}, 0x190) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) pwrite64(r0, 0xfffffffffffffffe, 0x0, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000380)={0x25, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x40, 0x7, [0x4, 0x7, 0x3462, 0x81, 0x7, 0x9, 0x1]}}, @pad1, @jumbo={0xc2, 0x4, 0x3800000}]}, 0x58) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000440)={0xec, {{0xa, 0x4e21, 0x6, @private2, 0x10001}}}, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@dev, @in6=@private2}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000640)={0x7, {{0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}]}, 0x110) sendfile(r0, r1, &(0x7f0000000780)=0x9, 0x1e) close_range(0xffffffffffffffff, r0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x2, &(0x7f00000007c0)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2c, r3, 0x8, &(0x7f0000000880)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x10, 0x8, 0x2e}, 0x10, 0xffffffffffffffff, r0, 0x5, 0x0, &(0x7f0000000900)=[{0x2, 0x2, 0xb, 0x8}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x3, 0xa, 0x6}, {0x0, 0x3, 0x6, 0x9}, {0x3f, 0x1, 0xa, 0x9}], 0x10, 0x1}, 0x90) syz_open_procfs(0x0, &(0x7f0000000a40)='net/tcp6\x00') splice(r4, &(0x7f0000000a80)=0xf4, r3, &(0x7f0000000ac0)=0x1ff, 0x44d, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000b00)={0x0, {{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x1000, @loopback, 0xbb2}}, {{0xa, 0x4e22, 0x3, @private0, 0x9}}, {{0xa, 0x4e23, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb08b}}]}, 0x210) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d40), 0xc000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000d80)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000dc0), 0x800, 0x0) r7 = dup(r6) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000e00)={"db4f724d5a3e1178c4a43a3dff012b7ddddf5c8ed0e602b0b20b1857ff9ffa0e", r7, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f0000000e40)={{r8}, {@void, @max}}) mount$9p_fd(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x10000, &(0x7f0000001040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@nodevmap}, {@fscache}, {@cache_mmap}], [{@audit}]}}) 18:01:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="81cfd637c067a8eb069bc70f46653969d4320d5b20e58c8465d3f01d41d2cafd0faa99ccb0b61bfd0f2b41988c60e749ddc437d84113c953000000802b0d3de4393b58db6ae573ff9e21bfe6912e1afd6391d4c3bedf", 0x56}, {&(0x7f0000000380)="d082cebe62f8bfc31d212705fbb8b8490368ebf2badf50c137ba67e1476b095abebd68767f5718b4450c0d55c638c7dbc716f770a25a13e0bd7ae182a0d8e75bb0919436a66e9c5b007cc721a674acb115e2e64f5bf06ac68225c489b28698bf03cc6ff681707d0647", 0x69}, {&(0x7f0000001340)="b8effb5a036b1dfd457b349b5749c95ec834dceb1d4d201f1a60e5489f4204ad87934e3898e5c7f69f77081a9622c251a4d22d30c33ba6a307258582455d17eb41d7c8c58784266fb3f9979da9a238fffdd1a5f864c10dfe71629bd95bf42b8135198f24f99083a051c29ba7683279131e562d15d2607e2cd4950d1839bf90aa66d8f6ec12a32f0fe7cd025050e09c06166adb081306d2f32e6dc4251a440303a8a59b5b22f232c4505d2526e7f2cc6abc5551b8e91915a32b23d0209fc8", 0xbe}], 0x3}}], 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x400800, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={r1, 0x7, 0x0, 0xfffffffffffff000}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x268, 0x0, 0x0, 0x148, 0x138, 0x148, 0x1d0, 0x240, 0x240, 0x1d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'ip6gretap0\x00', 'wg1\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xd, &(0x7f0000000300)=@raw=[@generic={0x1, 0x6, 0xf, 0x8000, 0x3}, @alu={0x4, 0x1, 0xc, 0xa, 0x3, 0xffffffffffffffc0, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb}, @generic={0x85, 0xd, 0x0, 0x9}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8001}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x1, 0x1, 0x0, 0x9, 0xffffffffffffffff}], &(0x7f0000000400)='GPL\x00', 0x0, 0xc5, &(0x7f0000000640)=""/197, 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000480)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x1, 0x5, 0x357}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[r3, r6], &(0x7f0000000580)=[{0x4, 0x1, 0xf, 0xc}, {0x2, 0x4, 0xe, 0x6}, {0x0, 0x0, 0x3, 0x1}, {0x3, 0x2, 0x7, 0x5}, {0x5, 0x4, 0x7, 0xb}, {0x5, 0x5, 0xa, 0x5}, {0x5, 0x3, 0xf, 0x6}], 0x10, 0x40}, 0x90) accept$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000000)=0x2) sendto$inet(r2, &(0x7f0000000800)="bf387254894e80d78542f72d8e5366160047b5c359ec5e3bb919c55248b22589f3bb7810b3db74d07e0c4c1f354fc88aa6c33e366501b567aed12b03492559a48ba33de3fa2e4cfcb0f383b67863d8717091", 0x52, 0x8000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) socket$netlink(0x10, 0x3, 0x12) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfffffdd2, 0x8055, 0x0, 0x0) [ 493.384477][T17293] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 493.694475][T17303] xt_CT: You must specify a L4 protocol and not use inversions on it [ 493.731994][T17303] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 494.760725][ T37] audit: type=1400 audit(1695578511.759:523): avc: denied { execute } for pid=17305 comm="syz-fuzzer" name="syz-executor.3" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 494.772723][ T37] audit: type=1400 audit(1695578511.759:524): avc: denied { execute_no_trans } for pid=17305 comm="syz-fuzzer" path="/syz-executor.1" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 494.854001][ T5191] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 494.858444][ T5191] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 494.862536][ T5191] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 494.867627][ T5191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 494.872697][ T5191] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 494.876555][ T5191] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 494.883675][ T37] audit: type=1400 audit(1695578511.879:525): avc: denied { mounton } for pid=17306 comm="syz-executor.1" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 494.968608][ T4601] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 494.972956][ T4601] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 494.978237][ T4601] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 494.982345][ T4601] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 494.986645][ T4601] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 494.990265][ T4601] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 495.008294][T17306] chnl_net:caif_netlink_parms(): no params data found [ 495.129609][T17306] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.132951][T17306] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.135874][T17306] bridge_slave_0: entered allmulticast mode [ 495.138770][T17306] bridge_slave_0: entered promiscuous mode [ 495.147311][T17306] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.150603][T17306] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.153971][T17306] bridge_slave_1: entered allmulticast mode [ 495.156839][T17306] bridge_slave_1: entered promiscuous mode [ 495.204815][T17306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.214286][T17306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.289437][T17306] team0: Port device team_slave_0 added [ 495.296050][T17306] team0: Port device team_slave_1 added [ 495.343821][T17306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.347105][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.359740][T17306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.370320][T17306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.373847][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.384563][T17306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.476716][T17306] hsr_slave_0: entered promiscuous mode [ 495.479426][T17306] hsr_slave_1: entered promiscuous mode [ 495.482511][T17306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.485531][T17306] Cannot create hsr debugfs directory [ 495.491368][T17311] chnl_net:caif_netlink_parms(): no params data found [ 495.656732][T17311] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.659421][T17311] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.662288][T17311] bridge_slave_0: entered allmulticast mode [ 495.665330][T17311] bridge_slave_0: entered promiscuous mode [ 495.671844][T17311] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.674969][T17311] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.677561][T17311] bridge_slave_1: entered allmulticast mode [ 495.680932][T17311] bridge_slave_1: entered promiscuous mode [ 495.735657][T17311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.752841][T17306] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.765517][T17311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.826763][T17306] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.835529][T17311] team0: Port device team_slave_0 added [ 495.839975][T17311] team0: Port device team_slave_1 added [ 495.893795][T17306] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.904490][T17311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.907786][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.918636][T17311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.925494][T17311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.928718][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.939987][T17311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.000049][T17306] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.011361][T17311] hsr_slave_0: entered promiscuous mode [ 496.015055][T17311] hsr_slave_1: entered promiscuous mode [ 496.017640][T17311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.020407][T17311] Cannot create hsr debugfs directory [ 496.171958][T17306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 496.200253][T17311] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.208203][T17306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 496.213489][T17306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 496.220572][T17306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 496.283027][T17311] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.298356][T17306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.309277][T17306] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.324471][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.327056][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.330845][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.333643][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.338750][ T37] audit: type=1400 audit(1695578513.339:526): avc: denied { write } for pid=4631 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.349002][ T37] audit: type=1400 audit(1695578513.339:527): avc: denied { remove_name } for pid=4631 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.357269][ T37] audit: type=1400 audit(1695578513.339:528): avc: denied { add_name } for pid=4631 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.366910][T17311] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.413759][T17311] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.491976][T17306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.536609][T17311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 496.542947][T17311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 496.549317][T17311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 496.554195][T17311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 496.563460][T17306] veth0_vlan: entered promiscuous mode [ 496.574114][T17306] veth1_vlan: entered promiscuous mode [ 496.605114][T17306] veth0_macvtap: entered promiscuous mode [ 496.610804][T17306] veth1_macvtap: entered promiscuous mode [ 496.626082][T17306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.629838][T17306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.634441][T17306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.638195][T17306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.641680][T17306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.645501][T17306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.648976][T17306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 496.652695][T17306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.658210][T17306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.668779][T17306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.672752][T17306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.677218][T17306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.680991][T17306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.685323][T17306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.689331][T17306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.695171][T17306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.699135][T17306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.704704][T17306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.715081][T17306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.718263][T17306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.721390][T17306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.725636][T17306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.734042][T17311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.760626][T17311] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.791831][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.795100][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.811472][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.811729][ T821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.814393][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.821358][ T821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.855421][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.858959][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.907026][ T37] audit: type=1400 audit(1695578513.909:529): avc: denied { write } for pid=17331 comm="syz-executor.1" name="tcp6" dev="proc" ino=4026533854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 496.913330][ T4601] Bluetooth: hci4: command 0x0409 tx timeout [ 496.972113][T17311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.001898][T17311] veth0_vlan: entered promiscuous mode [ 497.010037][T17311] veth1_vlan: entered promiscuous mode [ 497.035117][T17311] veth0_macvtap: entered promiscuous mode [ 497.042697][T17311] veth1_macvtap: entered promiscuous mode [ 497.060625][T17311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.063332][ T4601] Bluetooth: hci5: command 0x0409 tx timeout [ 497.065586][T17311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.072215][T17311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.078089][T17311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.082436][T17311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.088307][T17311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.091929][T17311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.096395][T17311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.100489][T17311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.104355][T17311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.109029][T17311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.115532][T17311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.119374][T17311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.123526][T17311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.128107][T17311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.131937][T17311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.139020][T17311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.145032][T17311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.148852][T17311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.152826][T17311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.156698][T17311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.161894][T17311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.171521][T17311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.175175][T17311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.179035][T17311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.182602][T17311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.226497][ T22] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.229632][ T22] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.247578][ T1402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.250586][ T1402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.772152][ T37] audit: type=1400 audit(1695578515.769:530): avc: denied { search } for pid=17338 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.780242][ T37] audit: type=1400 audit(1695578515.779:531): avc: denied { read } for pid=17339 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.788676][ T37] audit: type=1400 audit(1695578515.779:532): avc: denied { open } for pid=17339 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.983956][ T4601] Bluetooth: hci4: command 0x041b tx timeout [ 499.143255][ T4601] Bluetooth: hci5: command 0x041b tx timeout [ 501.063295][ T4601] Bluetooth: hci4: command 0x040f tx timeout [ 501.233207][ T4601] Bluetooth: hci5: command 0x040f tx timeout [ 501.466431][ T1351] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.469358][ T1351] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.143160][ T4601] Bluetooth: hci4: command 0x0419 tx timeout [ 503.303179][ T4601] Bluetooth: hci5: command 0x0419 tx timeout 18:02:48 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @private2, 0x1ff}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x80, {{0xa, 0x4e21, 0x5, @private2, 0x200}}}, 0x88) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x40, {{0xa, 0x4e23, 0x1, @mcast1, 0x6}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5e2c1480}}, {{0xa, 0x4e21, 0x833, @empty, 0x4}}]}, 0x190) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) pwrite64(r0, 0xfffffffffffffffe, 0x0, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000380)={0x25, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x40, 0x7, [0x4, 0x7, 0x3462, 0x81, 0x7, 0x9, 0x1]}}, @pad1, @jumbo={0xc2, 0x4, 0x3800000}]}, 0x58) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000440)={0xec, {{0xa, 0x4e21, 0x6, @private2, 0x10001}}}, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@dev, @in6=@private2}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000640)={0x7, {{0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}]}, 0x110) sendfile(r0, r1, &(0x7f0000000780)=0x9, 0x1e) close_range(0xffffffffffffffff, r0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x2, &(0x7f00000007c0)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2c, r3, 0x8, &(0x7f0000000880)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x10, 0x8, 0x2e}, 0x10, 0xffffffffffffffff, r0, 0x5, 0x0, &(0x7f0000000900)=[{0x2, 0x2, 0xb, 0x8}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x3, 0xa, 0x6}, {0x0, 0x3, 0x6, 0x9}, {0x3f, 0x1, 0xa, 0x9}], 0x10, 0x1}, 0x90) syz_open_procfs(0x0, &(0x7f0000000a40)='net/tcp6\x00') splice(r4, &(0x7f0000000a80)=0xf4, r3, &(0x7f0000000ac0)=0x1ff, 0x44d, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000b00)={0x0, {{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x1000, @loopback, 0xbb2}}, {{0xa, 0x4e22, 0x3, @private0, 0x9}}, {{0xa, 0x4e23, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb08b}}]}, 0x210) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d40), 0xc000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000d80)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000dc0), 0x800, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x10000, &(0x7f0000001040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@nodevmap}, {@fscache}, {@cache_mmap}], [{@audit}]}}) 18:02:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) 18:02:48 executing program 3: syz_mount_image$fuse(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x2006004, &(0x7f0000000540)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0) 18:02:48 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsmount(r0, 0x0, 0x0) 18:02:48 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001380)={0x0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) 18:02:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8910, &(0x7f0000001040)) [ 551.983170][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 551.983182][ T37] audit: type=1400 audit(1695578568.979:543): avc: denied { write } for pid=17349 comm="syz-executor.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:cert_t:s0" 18:02:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89b1, &(0x7f0000001040)) 18:02:49 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @private2, 0x1ff}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x80, {{0xa, 0x4e21, 0x5, @private2, 0x200}}}, 0x88) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x40, {{0xa, 0x4e23, 0x1, @mcast1, 0x6}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5e2c1480}}, {{0xa, 0x4e21, 0x833, @empty, 0x4}}]}, 0x190) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) pwrite64(r0, 0xfffffffffffffffe, 0x0, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000380)={0x25, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x40, 0x7, [0x4, 0x7, 0x3462, 0x81, 0x7, 0x9, 0x1]}}, @pad1, @jumbo={0xc2, 0x4, 0x3800000}]}, 0x58) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000440)={0xec, {{0xa, 0x4e21, 0x6, @private2, 0x10001}}}, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@dev, @in6=@private2}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000640)={0x7, {{0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}]}, 0x110) sendfile(r0, r1, &(0x7f0000000780)=0x9, 0x1e) close_range(0xffffffffffffffff, r0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x2, &(0x7f00000007c0)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2c, r3, 0x8, &(0x7f0000000880)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x10, 0x8, 0x2e}, 0x10, 0xffffffffffffffff, r0, 0x5, 0x0, &(0x7f0000000900)=[{0x2, 0x2, 0xb, 0x8}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x3, 0xa, 0x6}, {0x0, 0x3, 0x6, 0x9}, {0x3f, 0x1, 0xa, 0x9}], 0x10, 0x1}, 0x90) syz_open_procfs(0x0, &(0x7f0000000a40)='net/tcp6\x00') splice(r4, &(0x7f0000000a80)=0xf4, r3, &(0x7f0000000ac0)=0x1ff, 0x44d, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000b00)={0x0, {{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x1000, @loopback, 0xbb2}}, {{0xa, 0x4e22, 0x3, @private0, 0x9}}, {{0xa, 0x4e23, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb08b}}]}, 0x210) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d40), 0xc000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000d80)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000dc0), 0x800, 0x0) r7 = dup(r6) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000e00)={"db4f724d5a3e1178c4a43a3dff012b7ddddf5c8ed0e602b0b20b1857ff9ffa0e", r7, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f0000000e40)={{r8}, {@void, @max}}) mount$9p_fd(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x10000, &(0x7f0000001040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@nodevmap}, {@fscache}, {@cache_mmap}], [{@audit}]}}) [ 553.143748][ T5191] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 553.147216][ T5191] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 553.150873][ T5191] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 553.155975][ T5191] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 553.159272][ T5191] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 553.268249][T17359] chnl_net:caif_netlink_parms(): no params data found [ 553.360788][T17359] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.365467][T17359] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.368831][T17359] bridge_slave_0: entered allmulticast mode [ 553.373186][T17359] bridge_slave_0: entered promiscuous mode [ 553.379294][T17359] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.382432][T17359] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.386169][T17359] bridge_slave_1: entered allmulticast mode [ 553.389096][T17359] bridge_slave_1: entered promiscuous mode [ 553.461661][T17359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.469426][T17359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.486179][ T5191] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 553.490987][ T5191] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 553.495295][ T5191] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 553.499384][ T5191] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 553.502324][ T5191] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 553.505232][ T5191] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 553.524409][T17359] team0: Port device team_slave_0 added [ 553.529124][T17359] team0: Port device team_slave_1 added [ 553.571597][T17359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.574286][T17359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.583642][T17359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.590612][T17359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.593228][T17359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.602412][T17359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.665869][T17359] hsr_slave_0: entered promiscuous mode [ 553.668730][T17359] hsr_slave_1: entered promiscuous mode [ 553.671319][T17359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.674300][T17359] Cannot create hsr debugfs directory [ 553.852297][T17359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.864449][T17368] chnl_net:caif_netlink_parms(): no params data found [ 553.961611][T17359] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.967945][T17368] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.970584][T17368] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.973821][T17368] bridge_slave_0: entered allmulticast mode [ 553.978126][T17368] bridge_slave_0: entered promiscuous mode [ 553.982192][T17368] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.985191][T17368] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.987863][T17368] bridge_slave_1: entered allmulticast mode [ 553.990845][T17368] bridge_slave_1: entered promiscuous mode [ 554.034834][T17368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.040590][T17368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.054956][T17359] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.100667][T17368] team0: Port device team_slave_0 added [ 554.107779][T17368] team0: Port device team_slave_1 added [ 554.119333][T17359] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.171045][T17368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.174245][T17368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.185252][T17368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.191581][T17368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.194535][T17368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.204670][T17368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.263151][T17368] hsr_slave_0: entered promiscuous mode [ 554.265817][T17368] hsr_slave_1: entered promiscuous mode [ 554.268364][T17368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.271122][T17368] Cannot create hsr debugfs directory [ 554.369795][T17359] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 554.379425][T17359] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 554.390797][T17359] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 554.402751][T17359] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 554.470729][T17368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.522201][T17359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.535693][T17359] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.544531][ T811] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.547980][ T811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.561462][T17368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.585636][ T811] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.589075][ T811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.651043][T17368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.706852][T17359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.731349][T17368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.758410][T17359] veth0_vlan: entered promiscuous mode [ 554.764807][T17359] veth1_vlan: entered promiscuous mode [ 554.783347][T17359] veth0_macvtap: entered promiscuous mode [ 554.788036][T17359] veth1_macvtap: entered promiscuous mode [ 554.799215][T17359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.802996][T17359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.808842][T17359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.812856][T17359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.816577][T17359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.820450][T17359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.824320][T17359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.828122][T17359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.831701][T17359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.835609][T17359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.839203][T17359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.845822][T17359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.851250][T17359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.865086][T17359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.869938][T17359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.875202][T17359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.880028][T17359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.885475][T17359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.889370][T17359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.893781][T17359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.897556][T17359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.901336][T17359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.905859][T17359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.910403][T17359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.915393][T17359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.922393][T17359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.928513][T17359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.931884][T17359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.935215][T17359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.938434][T17359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.986708][T17368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 554.995798][T17368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 555.004016][T17368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 555.016764][T17368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 555.042869][ T821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.046517][ T821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.067119][ T821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.069962][ T821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.109305][T17368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.121476][T17368] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.129844][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.132525][ T5226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.145670][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.149048][ T5223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.171529][T17368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 555.223956][ T5191] Bluetooth: hci6: command 0x0409 tx timeout [ 555.267580][T17368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.298099][T17368] veth0_vlan: entered promiscuous mode [ 555.309674][T17368] veth1_vlan: entered promiscuous mode [ 555.340668][T17368] veth0_macvtap: entered promiscuous mode [ 555.347935][T17368] veth1_macvtap: entered promiscuous mode [ 555.363451][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.368375][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.373652][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.378624][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.384019][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.388014][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.391579][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.395494][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.399039][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.402813][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.406440][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.410204][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.413929][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.417704][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.422485][T17368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.431007][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.435045][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.438570][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.442339][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.446317][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.450032][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.453702][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.457433][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.460939][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.465490][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.469017][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.472870][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.476559][T17368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.480294][T17368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.485440][T17368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.492659][T17368] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.496418][T17368] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.499782][T17368] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.502937][T17368] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.542907][ T5226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.544326][ T5191] Bluetooth: hci7: command 0x0409 tx timeout [ 555.545987][ T5226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.564279][ T5223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.567314][ T5223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.303305][ T5191] Bluetooth: hci6: command 0x041b tx timeout [ 557.633265][ T5191] Bluetooth: hci7: command 0x041b tx timeout [ 559.383428][ T5191] Bluetooth: hci6: command 0x040f tx timeout [ 559.703981][ T5191] Bluetooth: hci7: command 0x040f tx timeout [ 561.463412][ T5191] Bluetooth: hci6: command 0x0419 tx timeout [ 561.783226][ T5191] Bluetooth: hci7: command 0x0419 tx timeout [ 562.904791][ T1351] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.907242][ T1351] ieee802154 phy1 wpan1: encryption failed: -22 18:03:47 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @private2, 0x1ff}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x80, {{0xa, 0x4e21, 0x5, @private2, 0x200}}}, 0x88) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x40, {{0xa, 0x4e23, 0x1, @mcast1, 0x6}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5e2c1480}}, {{0xa, 0x4e21, 0x833, @empty, 0x4}}]}, 0x190) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) pwrite64(r0, 0xfffffffffffffffe, 0x0, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000380)={0x25, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x40, 0x7, [0x4, 0x7, 0x3462, 0x81, 0x7, 0x9, 0x1]}}, @pad1, @jumbo={0xc2, 0x4, 0x3800000}]}, 0x58) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000440)={0xec, {{0xa, 0x4e21, 0x6, @private2, 0x10001}}}, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@dev, @in6=@private2}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000640)={0x7, {{0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}]}, 0x110) sendfile(r0, r1, &(0x7f0000000780)=0x9, 0x1e) close_range(0xffffffffffffffff, r0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x2, &(0x7f00000007c0)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2c, r3, 0x8, &(0x7f0000000880)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x10, 0x8, 0x2e}, 0x10, 0xffffffffffffffff, r0, 0x5, 0x0, &(0x7f0000000900)=[{0x2, 0x2, 0xb, 0x8}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x3, 0xa, 0x6}, {0x0, 0x3, 0x6, 0x9}, {0x3f, 0x1, 0xa, 0x9}], 0x10, 0x1}, 0x90) syz_open_procfs(0x0, &(0x7f0000000a40)='net/tcp6\x00') splice(r4, &(0x7f0000000a80)=0xf4, r3, &(0x7f0000000ac0)=0x1ff, 0x44d, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000b00)={0x0, {{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x1000, @loopback, 0xbb2}}, {{0xa, 0x4e22, 0x3, @private0, 0x9}}, {{0xa, 0x4e23, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb08b}}]}, 0x210) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d40), 0xc000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000d80)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000dc0), 0x800, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x10000, &(0x7f0000001040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@nodevmap}, {@fscache}, {@cache_mmap}], [{@audit}]}}) 18:03:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'lo\x00', {0x2, 0x0, @broadcast}}) 18:03:47 executing program 0: setresuid(0x0, 0xee01, 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) 18:03:47 executing program 3: setresuid(0x0, 0xee01, 0x0) setresuid(0xee00, 0xee01, 0x0) 18:03:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8971, &(0x7f0000001040)) 18:03:47 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff) 18:03:47 executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6, 0x1000) 18:03:47 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @private2, 0x1ff}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000040)={0x80, {{0xa, 0x4e21, 0x5, @private2, 0x200}}}, 0x88) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x40, {{0xa, 0x4e23, 0x1, @mcast1, 0x6}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5e2c1480}}, {{0xa, 0x4e21, 0x833, @empty, 0x4}}]}, 0x190) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) pwrite64(r0, 0xfffffffffffffffe, 0x0, 0x5) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000380)={0x25, 0x9, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x40, 0x7, [0x4, 0x7, 0x3462, 0x81, 0x7, 0x9, 0x1]}}, @pad1, @jumbo={0xc2, 0x4, 0x3800000}]}, 0x58) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000440)={0xec, {{0xa, 0x4e21, 0x6, @private2, 0x10001}}}, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@dev, @in6=@private2}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000600)=0xe8) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000640)={0x7, {{0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}]}, 0x110) sendfile(r0, r1, &(0x7f0000000780)=0x9, 0x1e) close_range(0xffffffffffffffff, r0, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x2, &(0x7f00000007c0)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2c, r3, 0x8, &(0x7f0000000880)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x10, 0x8, 0x2e}, 0x10, 0xffffffffffffffff, r0, 0x5, 0x0, &(0x7f0000000900)=[{0x2, 0x2, 0xb, 0x8}, {0x3, 0x2, 0xc, 0x1}, {0x1, 0x3, 0xa, 0x6}, {0x0, 0x3, 0x6, 0x9}, {0x3f, 0x1, 0xa, 0x9}], 0x10, 0x1}, 0x90) syz_open_procfs(0x0, &(0x7f0000000a40)='net/tcp6\x00') splice(r4, &(0x7f0000000a80)=0xf4, r3, &(0x7f0000000ac0)=0x1ff, 0x44d, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000b00)={0x0, {{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x1000, @loopback, 0xbb2}}, {{0xa, 0x4e22, 0x3, @private0, 0x9}}, {{0xa, 0x4e23, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb08b}}]}, 0x210) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d40), 0xc000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000d80)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000dc0), 0x800, 0x0) r7 = dup(r6) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000e00)={"db4f724d5a3e1178c4a43a3dff012b7ddddf5c8ed0e602b0b20b1857ff9ffa0e", r7, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RESIZE(r7, 0x50009403, &(0x7f0000000e40)={{r8}, {@void, @max}}) mount$9p_fd(0x0, &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x10000, &(0x7f0000001040)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache}, {@nodevmap}, {@fscache}, {@cache_mmap}], [{@audit}]}}) [ 611.359613][T17411] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 611.364312][T17411] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 611.368256][T17411] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 611.371727][T17411] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 611.376265][T17411] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 611.379858][T17411] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 611.549309][T17408] chnl_net:caif_netlink_parms(): no params data found [ 611.671324][T17408] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.675005][T17408] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.678506][T17408] bridge_slave_0: entered allmulticast mode [ 611.682971][T17408] bridge_slave_0: entered promiscuous mode [ 611.687215][T17408] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.689890][T17408] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.692614][T17408] bridge_slave_1: entered allmulticast mode [ 611.698265][T17408] bridge_slave_1: entered promiscuous mode [ 611.758899][T17408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.767291][T17408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.794333][T17411] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 611.800287][T17411] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 611.805402][T17411] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 611.809916][T17411] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 611.814352][T17411] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 611.818057][T17411] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 611.822147][T17408] team0: Port device team_slave_0 added [ 611.827052][T17408] team0: Port device team_slave_1 added [ 611.874866][T17408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.877925][T17408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.888958][T17408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.895237][T17408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.898222][T17408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.909939][T17408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.988874][T17408] hsr_slave_0: entered promiscuous mode [ 611.991759][T17408] hsr_slave_1: entered promiscuous mode [ 611.994579][T17408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.997317][T17408] Cannot create hsr debugfs directory [ 612.205173][T17408] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.298065][T17419] chnl_net:caif_netlink_parms(): no params data found [ 612.326655][T17408] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.406803][T17408] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.441255][T17419] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.444387][T17419] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.447865][T17419] bridge_slave_0: entered allmulticast mode [ 612.450946][T17419] bridge_slave_0: entered promiscuous mode [ 612.456200][T17419] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.458891][T17419] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.461571][T17419] bridge_slave_1: entered allmulticast mode [ 612.465507][T17419] bridge_slave_1: entered promiscuous mode [ 612.522018][T17408] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.535208][T17419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.543560][T17419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.645609][T17419] team0: Port device team_slave_0 added [ 612.651174][T17419] team0: Port device team_slave_1 added [ 612.731787][T17419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.735600][T17419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.747966][T17419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.755462][T17419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.758672][T17419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.769926][T17419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.896109][T17419] hsr_slave_0: entered promiscuous mode [ 612.899585][T17419] hsr_slave_1: entered promiscuous mode [ 612.902695][T17419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.906230][T17419] Cannot create hsr debugfs directory [ 612.908675][T17408] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 612.917388][T17408] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 612.926410][T17408] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 612.974442][T17408] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 613.110683][T17419] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.173881][T17408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.188272][T17408] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.196779][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.200027][ T5226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.218575][T17419] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.237321][ T8628] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.240833][ T8628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.278010][T17419] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.369903][T17419] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.461883][T17408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.473935][ T5191] Bluetooth: hci8: command 0x0409 tx timeout [ 613.508088][T17419] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 613.514067][T17419] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 613.528415][T17419] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 613.540884][T17419] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 613.560940][T17408] veth0_vlan: entered promiscuous mode [ 613.578584][T17408] veth1_vlan: entered promiscuous mode [ 613.617273][T17408] veth0_macvtap: entered promiscuous mode [ 613.624673][T17408] veth1_macvtap: entered promiscuous mode [ 613.662732][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.667526][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.671423][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.679067][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.682652][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.686871][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.690381][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.694430][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.697953][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.701678][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.705743][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.709587][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.713264][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.717023][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.720553][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.724491][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.730325][T17408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.739778][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.743678][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.747170][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.751417][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.755106][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.758816][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.761927][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.766459][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.770236][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.774415][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.778383][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.782535][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.787716][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.791470][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.795082][T17408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.798897][T17408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.803933][T17408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.818014][T17419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.825565][T17408] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.829245][T17408] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.833493][T17408] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.837005][T17408] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.865556][T17419] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.873390][ T5191] Bluetooth: hci9: command 0x0409 tx timeout [ 613.882200][ T1402] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.885588][ T1402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.912040][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.914930][ T5223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.930427][T17329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.934055][T17329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.963401][ T1402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.966839][ T1402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.109899][T17419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.141442][T17419] veth0_vlan: entered promiscuous mode [ 614.155285][T17419] veth1_vlan: entered promiscuous mode [ 614.181711][T17419] veth0_macvtap: entered promiscuous mode [ 614.194201][T17419] veth1_macvtap: entered promiscuous mode [ 614.211695][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.216897][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.221526][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.226717][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.230800][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.234729][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.238246][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.242376][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.246074][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.249863][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.253571][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.257510][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.261553][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.265829][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.269347][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.273176][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.276914][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 614.280866][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.285926][T17419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.294825][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.298627][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.302182][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.306488][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.311104][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.315443][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.319010][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.322760][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.327465][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.332468][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.338307][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.344808][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.349565][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.354613][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.359156][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.364275][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.369727][T17419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.373705][T17419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.378539][T17419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.386400][T17419] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.390345][T17419] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.394649][T17419] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.398538][T17419] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.446201][ T22] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.449470][ T22] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.476759][ T22] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.479679][ T22] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.554518][ T5191] Bluetooth: hci8: command 0x041b tx timeout [ 615.943227][ T5191] Bluetooth: hci9: command 0x041b tx timeout [ 617.623202][ T5191] Bluetooth: hci8: command 0x040f tx timeout [ 618.024229][ T5191] Bluetooth: hci9: command 0x040f tx timeout [ 619.703414][T17442] Bluetooth: hci8: command 0x0419 tx timeout [ 620.103548][T17442] Bluetooth: hci9: command 0x0419 tx timeout [ 621.385039][T17442] Bluetooth: hci5: command 0x0406 tx timeout [ 621.387619][T17442] Bluetooth: hci4: command 0x0406 tx timeout [ 624.346847][ T1351] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.349744][ T1351] ieee802154 phy1 wpan1: encryption failed: -22 18:04:46 executing program 3: setresuid(0xee00, 0xee01, 0x0) r0 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) 18:04:46 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 18:04:46 executing program 3: setresuid(0x0, 0xee01, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) 18:04:46 executing program 0: setresuid(0x0, 0xee01, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 18:04:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='inode_readahead_blks=0x0000000000000800,nogrpid,debug_want_extra_isize=0x0000000000000066,dioread_nolock,max_batch_time=0x0000000000000008,resgid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0xfd, 0x448, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 18:04:46 executing program 0: r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x64}}, 0x0) 18:04:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[], 0xe68}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000002cc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 669.173167][T17457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17457 comm=syz-executor.3 18:04:46 executing program 0: setresuid(0x0, 0xee01, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x191541, 0x0) 18:04:46 executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x1100) 18:04:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x79e, &(0x7f0000000a40)="$eJzs3ctrXGUbAPDnTG5N2u9LPvhA6yogaKB0YmpsFVxUXIhgoaBr2zCZhjaTTMlMShMCbRHBjaDFhaCb7gQvdefWy1b/CxfSUmwajLiQkTOZaSfNTDppbo35/eC07zvnTJ73OZf3vDPnMCeAfWsw/ScTcTgiPkoi+muvJxHRVS11RpxcWW55cSGXTklUKm//nlSXWVpcyEXDe1IHa5WnI+LH9yOOZNbGLc3NT44VCvmZWn24PHVxuDQ3f/T81NhEfiI/fXxkdPTYiZdOHN+6XP/4Zf7Q7Y/feP6bk3+999TND39K4mQcqs1rzGOrDMZgbZ10patwlde3OtguS9aZd2AH28HGpIdmx8pRHoejPzqqpRZ6d7JlAMB2uRIRFQBgn0mc/wFgn6l/D7C0uJCrT+t8XbDOxYG96c5rKxeolmrXNpfv599Zu2Z3oHodtG8pWZV8EhEDWxB/MCI+/+7dr9Iptuk6JEAzV69FxNmBwbX9f7LmnoWNeqGNZQYfqjf0f92bDA88wvfp+OflZuO/zP3xTzQZ//Q0OXYfxzrHf03m1haEaSkd/73acG/bckP+NQMdtdp/qmO+ruTc+UI+7dv+GxFD0dWT1kfWiTF07+97reY1jv/uXr+Q9nm5u9cvfPlgicytzp7V7xkfK49tJudGd65FPNPZLP96/79yD1uz8e/pNmO8+coHn7Wal+af5luf0vir899elRsRzzXd/g/uaEvWvT9xuLo7DNd3iia+/fXTvlbxG7d/OqXx658FdkK6/fvWz38gabxfs7TxGD/f6P+h1bxH5998/+9O3qmW64OEy2Pl8sxIRHfy1trXjz14b71eXz7Nf+jZ7qbHf73/a7b/p58Jz7aZf+fta18/fv7bK81/fEPbf+OFm8uTHa3it7f9R6ulodor7fR/7TZwM+sOAAAAAAAAAAAAAAAAAAAAAAAAANqViYhDkWSy98uZTDa78gzv/0dfplAslY+cK85Oj0f1WdkD0ZWp/9Rlf8PvoY7Ufg+/Xj/2UP3FiPhfRHzS01utZ3PFwvhuJw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANQdbPP8/9VvPbrcOANg2B3a7AQDAjnP+B4D9Z2Pn/95tawcAsHN8/geA/cf5HwD2H+d/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAttnpU6fSqfLn4kIurY9fmpudLF46Op4vTWanZnPZXHHmYnaiWJwo5LO54lTLP3R15b9CsXhxNKZnLw+X86XycGlu/sxUcXa6fOb81NhE/ky+a8cyAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2lebmJ8cKhfzMnilUKpUrT0Az/g2FjtpO8KS0Z88VMptYdV/sduMfUWjsJXp3p3MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2AP+CQAA//+qiiUU") r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfd14) fallocate(r0, 0x0, 0x0, 0xb45) 18:04:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x12, 0x6fe761bdac066791}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 18:04:46 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x204004, &(0x7f00000001c0)={[{}, {@check_relaxed}, {@utf8}, {@block={'block', 0x3d, 0x400}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@utf8}, {@hide}, {@map_off}, {@nojoliet}]}, 0x81, 0x56f, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) [ 669.546031][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 669.550380][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 669.558149][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 669.562938][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 669.567652][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 669.571695][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 669.576707][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 669.587186][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 669.591752][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 669.597122][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 670.386915][T17411] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 670.392748][T17411] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 670.402173][T17411] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 670.407059][T17411] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 670.411117][T17411] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 670.414907][T17411] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 670.627346][T17468] chnl_net:caif_netlink_parms(): no params data found [ 670.753776][T17468] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.757142][T17468] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.760637][T17468] bridge_slave_0: entered allmulticast mode [ 670.766102][T17468] bridge_slave_0: entered promiscuous mode [ 670.771220][T17468] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.774880][T17468] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.778384][T17468] bridge_slave_1: entered allmulticast mode [ 670.782855][T17468] bridge_slave_1: entered promiscuous mode [ 670.836945][ T5191] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 670.841958][ T5191] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 670.847102][ T5191] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 670.850980][ T5191] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 670.855052][ T5191] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 670.875175][T17468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.883304][T17468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.966383][T17468] team0: Port device team_slave_0 added [ 670.979626][T17468] team0: Port device team_slave_1 added [ 671.043713][T17468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.046980][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.059003][T17468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.066606][T17468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.070021][T17468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.082494][T17468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.179452][T17468] hsr_slave_0: entered promiscuous mode [ 671.183414][T17468] hsr_slave_1: entered promiscuous mode [ 671.187094][T17468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 671.190603][T17468] Cannot create hsr debugfs directory [ 671.443811][T17468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.462318][T17478] chnl_net:caif_netlink_parms(): no params data found [ 671.560382][T17468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.700809][T17468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.716139][T17478] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.719582][T17478] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.723482][T17478] bridge_slave_0: entered allmulticast mode [ 671.728134][T17478] bridge_slave_0: entered promiscuous mode [ 671.734126][T17478] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.737613][T17478] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.741105][T17478] bridge_slave_1: entered allmulticast mode [ 671.746691][T17478] bridge_slave_1: entered promiscuous mode [ 671.843842][T17468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.857022][T17478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.865684][T17478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.941083][T17478] team0: Port device team_slave_0 added [ 671.947144][T17478] team0: Port device team_slave_1 added [ 672.018832][T17478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.022140][T17478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.035882][T17478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.043294][T17478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.046595][T17478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.059140][T17478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.171903][T17478] hsr_slave_0: entered promiscuous mode [ 672.175854][T17478] hsr_slave_1: entered promiscuous mode [ 672.179452][T17478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.183194][T17478] Cannot create hsr debugfs directory [ 672.288686][T17468] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 672.300767][T17468] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 672.307261][T17468] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 672.320196][T17468] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 672.445625][T17478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.513297][T17411] Bluetooth: hci10: command 0x0409 tx timeout [ 672.531672][T17468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.550406][T17478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.580658][T17468] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.591178][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.594755][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.606870][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.610277][ T5226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.622428][T17478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.720124][T17478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.811670][T17468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.891380][T17478] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 672.901811][T17478] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 672.910912][T17478] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 672.913305][T17411] Bluetooth: hci11: command 0x0409 tx timeout [ 672.925056][T17468] veth0_vlan: entered promiscuous mode [ 672.933421][T17478] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 672.946477][T17468] veth1_vlan: entered promiscuous mode [ 672.981752][T17468] veth0_macvtap: entered promiscuous mode [ 673.006051][T17468] veth1_macvtap: entered promiscuous mode [ 673.032458][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.037054][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.041449][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.046083][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.050676][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.056068][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.060625][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.065773][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.070582][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.075618][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.080155][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.084941][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.089462][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.094472][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.099113][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.104068][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.108606][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.113660][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.118201][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.124097][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.128985][T17468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.139630][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.145504][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.149481][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.154076][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.158319][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.162795][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.167666][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.172562][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.177423][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.182292][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.187522][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.192393][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.197093][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.201950][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.206705][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.211522][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.216240][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.221206][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.226689][T17468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.231564][T17468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.238064][T17468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.261714][T17468] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.265890][T17468] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.269948][T17468] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.274321][T17468] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.302126][T17478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.339267][T17478] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.364427][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.367808][ T5226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.394799][ T821] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.397579][ T821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.413450][ T811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.416486][ T811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.440417][ T5226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.444237][ T5226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:04:50 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 18:04:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1c916, &(0x7f0000000200)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@grpquota}, {@noinit_itable}, {@lazytime}, {@jqfmt_vfsold}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9ffff}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4eb, &(0x7f0000000540)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 18:04:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') getdents(r0, &(0x7f0000000200)=""/98, 0x62) 18:04:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$FUSE_DIRENTPLUS(r1, 0x0, 0x0) 18:04:50 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4, 0x1100) [ 673.612433][T17478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.662408][T17478] veth0_vlan: entered promiscuous mode [ 673.670202][T17478] veth1_vlan: entered promiscuous mode [ 673.693272][T17478] veth0_macvtap: entered promiscuous mode [ 673.698367][T17478] veth1_macvtap: entered promiscuous mode [ 673.713937][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.717777][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.721473][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.725731][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.729563][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.734324][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.738922][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.743553][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.747372][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.751417][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.756018][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.760901][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.764672][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.769463][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.773954][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.778783][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.783918][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.788595][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.792712][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.796912][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.801418][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.806450][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.813029][T17478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.826955][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.830736][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.834662][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.838892][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.842409][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.846296][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.850279][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.854678][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.858729][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.864572][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.868483][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.872861][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.876948][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.881330][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.885453][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.889685][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.893387][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.897173][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.900787][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.904634][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.908404][T17478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.912071][T17478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.916896][T17478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.929481][T17478] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.934311][T17478] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.938428][T17478] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.943003][T17478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.008645][ T5226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.012367][ T5226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.040891][ T5226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.045372][ T5226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:04:51 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x75f502, 0xf2) 18:04:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) 18:04:51 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 18:04:51 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x0) r2 = dup(r1) r3 = getegid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2000000, &(0x7f0000001980)=ANY=[@ANYRES16=r3, @ANYRESHEX, @ANYBLOB="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"], 0x1, 0x4d3, &(0x7f0000000f00)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 18:04:51 executing program 0: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x77359400}}, 0x100) 18:04:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$P9_RSTATu(r1, 0x0, 0x0) 18:04:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$P9_RUNLINKAT(r1, 0x0, 0xffffffffffffffe5) 18:04:51 executing program 3: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x108) 18:04:51 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x200) 18:04:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$P9_RXATTRCREATE(r1, 0x0, 0x0) 18:04:51 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$char_usb(r0, &(0x7f0000000040)="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", 0xffffffffffffffa9) 18:04:51 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_WRITE(r0, 0x0, 0xd1aea3b4290e83c) 18:04:51 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000180)) 18:04:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$FUSE_WRITE(r1, 0x0, 0x0) 18:04:51 executing program 3: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x20040, 0x0) 18:04:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$FUSE_LSEEK(r1, 0x0, 0x0) 18:04:51 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x16) 18:04:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = dup(r1) write$FUSE_ENTRY(r2, 0x0, 0x0) 18:04:51 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$char_usb(r0, &(0x7f0000000180), 0x0) 18:04:51 executing program 1: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x2, 0x0) 18:04:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) read$char_usb(r1, &(0x7f0000000080)=""/25, 0x19) 18:04:51 executing program 0: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 18:04:51 executing program 3: execveat(0xffffffffffffffff, &(0x7f0000000640)='./file1\x00', 0x0, &(0x7f0000000a00)=[&(0x7f0000000940)='.pending_reads\x00'], 0x0) 18:04:51 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xffffffffffffff12) 18:04:51 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000040)='.\x00', r0, &(0x7f0000000080)='./file1\x00') 18:04:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) read$char_usb(r1, &(0x7f0000000000)=""/214, 0xd6) 18:04:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$P9_RUNLINKAT(r1, 0x0, 0x0) 18:04:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$FUSE_IOCTL(r1, 0x0, 0x0) [ 674.583665][T17411] Bluetooth: hci10: command 0x041b tx timeout [ 674.984334][T17411] Bluetooth: hci11: command 0x041b tx timeout 18:04:52 executing program 2: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = dup(r0) symlinkat(&(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') 18:04:52 executing program 3: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) 18:04:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$P9_RLCREATE(r1, 0x0, 0x0) 18:04:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$P9_RRENAMEAT(r1, 0x0, 0x0) 18:04:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$P9_RSTAT(r1, 0x0, 0x0) 18:04:52 executing program 1: shmget(0x1, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) 18:04:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$P9_RMKNOD(r1, 0x0, 0x0) 18:04:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$P9_RLERRORu(r1, 0x0, 0x0) 18:04:52 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = dup(r0) openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) 18:04:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x2020) 18:04:52 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = dup(r0) mknodat$loop(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x1) 18:04:52 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = dup(r0) mknodat$loop(r1, &(0x7f0000000040)='./file1\x00', 0x8000, 0x1) 18:04:52 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_ENTRY(r0, 0x0, 0xfffffffffffffe3e) 18:04:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$char_usb(r1, 0x0, 0x0) 18:04:52 executing program 1: r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/class/dmi', 0x80000, 0x0) ioctl$TUNGETFEATURES(r0, 0x5450, 0x0) 18:04:52 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_GETXATTR(r0, 0xffffffffffffffff, 0x0) 18:04:52 executing program 3: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x4, 0x0) 18:04:52 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) read$FUSE(r0, 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) 18:04:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) write$FUSE_GETXATTR(r1, 0x0, 0x0) 18:04:52 executing program 3: open$dir(0x0, 0x48007, 0x0) 18:04:52 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:04:52 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x36}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:04:52 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x16}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:04:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) write$FUSE_DIRENTPLUS(r1, 0x0, 0x12) 18:04:52 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:04:52 executing program 1: sigaltstack(&(0x7f0000000600)={&(0x7f0000000540)=""/132, 0x2, 0x84}, 0x0) 18:04:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f00000001c0), 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)='j', 0x1}], 0x1, &(0x7f00000002c0)=[@init={0x18}], 0x18}, 0x0) 18:04:52 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000100)="b1", 0x1, 0x0, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) close(r0) 18:04:52 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000003680)={@local, @remote, @val, {@ipv6}}, 0x0) 18:04:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, 0x0, 0x0) 18:04:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)=0x8) 18:04:52 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) 18:04:52 executing program 1: r0 = socket(0x2, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)=@in={0x10, 0x2}, 0x10) 18:04:52 executing program 2: open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) 18:04:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in={0x10, 0x2}, 0x10) 18:04:52 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xfffffffffffffedb, 0x1c, 0x3}, 0x1c) 18:04:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="d533697f5b5d793821933a66c2c840954fec2a074674601f07cdda038efffb3dddd62c51edad4cad46d7505da29b496349b5a29f26f85933d7be93c92308b33460367568aa2ec8cade9871de27361915c66982244709284322a75db8c008333762d4a755c58e68995541d9673c506cf0464e580446204bf34ee4eb56cb5c8b1c173310fe30cba11ebaae74b771d92f8d5e9e89b7d7dc28d65f07275dfb6ef18ec7d2082754514c978d1631d548d229c28ef5442c6fcbc2470000", 0xffffff37}], 0x1, &(0x7f0000000140)=[@sndrcv={0x30}, @dstaddrv4, @prinfo={0x18}, @init={0x18}, @init={0x18}, @init={0x18}, @authinfo={0x18}], 0xc8}, 0x0) 18:04:52 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 18:04:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f0000000180), &(0x7f0000000240)=0x90) 18:04:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000900)={&(0x7f0000000640)=@in6={0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="10"], 0x10}, 0x0) 18:04:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40101) 18:04:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000100), &(0x7f0000000140)=0x8) 18:04:52 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) close(r0) 18:04:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000002c0), &(0x7f0000000100)=0x5f) 18:04:52 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x10) [ 675.581739][ T37] audit: type=1400 audit(1695578692.579:544): avc: denied { read } for pid=17649 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 18:04:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000300)=0xfff9) 18:04:52 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) close(r0) 18:04:52 executing program 2: r0 = socket(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 18:04:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) bind(r2, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 18:04:52 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) 18:04:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) sendto$inet(r2, &(0x7f00000002c0)='[', 0x1, 0x0, &(0x7f0000000340)={0x10, 0x2}, 0x10) 18:04:52 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f0000000380)=0x2) 18:04:52 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xfffffffffffffd7c, 0x1c, 0x2}, 0x1c) close(r0) 18:04:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000080)={r2}, &(0x7f00000000c0)=0x8) 18:04:52 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) sendto$inet6(r0, &(0x7f0000000280)="1d", 0x1, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) 18:04:52 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) bind(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 18:04:52 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/195, 0xc3}, 0x81) 18:04:52 executing program 0: r0 = socket(0x1c, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000300)=0x8, 0x4) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000340)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 18:04:52 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet6(r1, 0x0, 0x0, 0x100, 0x0, 0x0) 18:04:52 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x1c, 0x1c, 0x1}, 0x1c) 18:04:52 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x4, &(0x7f00000000c0), 0x4) 18:04:52 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @random="5422290375aa", @val, {@ipv6}}, 0x0) 18:04:52 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000005c0), 0x8c) 18:04:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x902, &(0x7f0000000140), 0x4) 18:04:52 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40082) 18:04:52 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000002c0), &(0x7f0000000100)=0x90) 18:04:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002400)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="1c000000840000000a000000ff010000000000000000000000000001100000008400000008000000000000001c000000840000000a0000008023aefac65fcf3949146ffb7fc8d53a14000000840000000100000007000900b500050014000000840000000700000002000000010000001c00000084000000040000000400002001f0ffffffffff7f", @ANYRES32, @ANYBLOB="14"], 0xa0}, 0x0) 18:04:52 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000100), &(0x7f0000000280)=0x8) 18:04:52 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x12, &(0x7f0000000000)={0x1}, 0x1) 18:04:52 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[{0xc}, {0xc}], 0x18}, 0x0) 18:04:52 executing program 3: linkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c00) 18:04:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x107, &(0x7f0000000200), &(0x7f0000000240)=0x18) 18:04:52 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f0000000540)={0x0, 0x3}, 0x8) 18:04:52 executing program 3: r0 = socket(0x1c, 0x10000001, 0x84) sendmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@cred, @cred], 0xc0}, 0x0) 18:04:52 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x16, &(0x7f0000000000), 0x8) 18:04:52 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) bind(r0, &(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c) 18:04:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000003500)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@dstaddrv6={0x1c, 0x84, 0xa, @rand_addr=' \x01\x00'}, @dstaddrv4={0x10, 0x84, 0x9, @rand_addr=0x7}], 0x2c}, 0x0) 18:04:52 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x33, 0x0, &(0x7f0000000500)) 18:04:52 executing program 1: r0 = socket(0x1c, 0x10000001, 0x84) bind(r0, &(0x7f0000000000)=@un=@file={0xa}, 0xa) 18:04:52 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x84) 18:04:53 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0) 18:04:53 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) select(0x40, &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0) 18:04:53 executing program 1: syz_emit_ethernet(0x4f, &(0x7f00000000c0)={@local, @broadcast, @val, {@ipv6}}, 0x0) 18:04:53 executing program 2: r0 = socket(0x1c, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000080), &(0x7f00000000c0)=0x18) 18:04:53 executing program 1: r0 = getuid() setreuid(r0, r0) 18:04:53 executing program 0: syz_emit_ethernet(0x50, &(0x7f0000000040)={@local, @remote, @val, {@ipv4}}, 0x0) 18:04:53 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040)={0x0, 0x4}, 0x10) 18:04:53 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @broadcast, @val, {@ipv4}}, 0x0) 18:04:53 executing program 3: mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x9) 18:04:53 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 18:04:53 executing program 1: syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @random="e05a1ff9a915", @val, {@ipv4}}, 0x0) 18:04:53 executing program 3: madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc9fe38a0718f7571) 18:04:53 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) select(0x48, &(0x7f0000000100), &(0x7f0000000140)={0xfffffffffffffffe}, 0x0, 0x0) 18:04:53 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 18:04:53 executing program 3: syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @local, @val, {@ipv4}}, 0x0) 18:04:53 executing program 1: syz_emit_ethernet(0x22, &(0x7f0000000080)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 18:04:53 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind(r0, 0x0, 0x0) 18:04:53 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 18:04:53 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) fcntl$lock(r0, 0x0, &(0x7f0000000000)) 18:04:53 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000300), 0x10, 0x0, 0x0) 18:04:53 executing program 1: syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 18:04:53 executing program 0: syz_emit_ethernet(0x82, &(0x7f0000000240)={@random="0f8de51c1980", @local, @val, {@ipv4}}, 0x0) 18:04:53 executing program 3: select(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x32}) 18:04:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) select(0x40, &(0x7f0000000100)={0xfffffffffffffffc}, 0x0, 0x0, 0x0) 18:04:53 executing program 1: mlock(&(0x7f0000ff4000/0xc000)=nil, 0xc000) 18:04:53 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) fcntl$lock(r0, 0x0, 0x0) 18:04:53 executing program 2: openat(0xffffffffffffffff, 0x0, 0x400, 0x0) 18:04:53 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl$TIOCMGET(r0, 0x4004746a, 0x0) 18:04:53 executing program 1: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x18, 0x1}, 0xc) 18:04:53 executing program 2: syz_emit_ethernet(0x52, &(0x7f0000000040)={@broadcast, @empty, @val, {@ipv4}}, 0x0) [ 676.673657][ T4601] Bluetooth: hci10: command 0x040f tx timeout 18:04:54 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @val, {@ipv4}}, 0x0) 18:04:54 executing program 0: mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 18:04:54 executing program 1: sendmsg$unix(0xffffffffffffff9c, &(0x7f00000024c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX], 0xa, 0x0}, 0x0) getuid() 18:04:54 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) select(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000180)={0x58f}, 0x0) [ 677.073417][ T4601] Bluetooth: hci11: command 0x040f tx timeout 18:04:54 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000001680)={@local, @remote, @val, {@ipv6}}, 0x0) 18:04:54 executing program 1: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000480)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9f}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x10, 0x0, 0x0) 18:04:54 executing program 3: syz_emit_ethernet(0x4a, &(0x7f00000019c0)={@local, @random="37f253a12377", @val, {@ipv6}}, 0x0) 18:04:54 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) select(0x48, &(0x7f0000000100), &(0x7f0000000140)={0xfffffffffffffffe}, 0x0, 0x0) close(r0) 18:04:54 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000001480)={@local, @remote, @val, {@ipv6}}, 0x0) 18:04:54 executing program 2: r0 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 18:04:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000003500)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@dstaddrv6={0x1c, 0x84, 0xa, @rand_addr=' \x01\x00'}, @dstaddrv4={0x10, 0x84, 0x9}], 0x2c}, 0x0) 18:04:54 executing program 3: syz_emit_ethernet(0xa5, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffd6ff24546e1486dd60301143006f00000000df1137980f1ffc0000000000000000ff"], 0x0) 18:04:54 executing program 1: socket$unix(0x1, 0x2, 0x0) select(0x48, &(0x7f0000000100), &(0x7f0000000140)={0xfffffffffffffffe}, 0x0, 0x0) select(0x40, &(0x7f0000000080)={0x8}, &(0x7f00000000c0)={0x4}, 0x0, 0x0) 18:04:54 executing program 0: socket(0x18, 0x3, 0x9) 18:04:54 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="d6ff24546e14", @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @multicast1, @local, @local={0xac, 0x14, 0x0}}}}}, 0x0) [ 677.161444][ T37] audit: type=1400 audit(1695578694.159:545): avc: denied { map } for pid=17818 comm="syz-executor.2" path="/syzkaller-testdir1197137401/syzkaller.Kwv5Yd/36" dev="sda1" ino=1934 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 18:04:54 executing program 2: r0 = socket(0x2, 0x2, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 18:04:54 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 18:04:54 executing program 0: syz_emit_ethernet(0x52, &(0x7f0000000240)={@random="0f8de51c1980", @local, @val, {@ipv4}}, 0x0) 18:04:54 executing program 3: setitimer(0x0, &(0x7f00000000c0)={{}, {0x400000000}}, 0x0) 18:04:54 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @remote, @val, {@ipv4}}, 0x0) 18:04:54 executing program 0: select(0x40, &(0x7f0000000000), &(0x7f00000000c0)={0x9}, 0x0, 0x0) 18:04:54 executing program 1: setitimer(0x0, &(0x7f0000000040)={{}, {0x80000001}}, 0x0) setitimer(0x0, 0x0, &(0x7f00000000c0)) 18:04:54 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:04:54 executing program 2: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000480)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffff}}) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x10, 0x0, 0x0) 18:04:54 executing program 0: syz_emit_ethernet(0x36, &(0x7f00000001c0)={@broadcast, @random="fec0bf1783db", @val, {@ipv6}}, 0x0) 18:04:54 executing program 1: syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 18:04:54 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @val, {@ipv6}}, 0x0) 18:04:54 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 18:04:54 executing program 1: r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), 0x1) 18:04:54 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x0, 0x8}, 0x10) 18:04:54 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r0, 0x0, 0x0) 18:04:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f00000001c0)=""/91, 0x5b) close(r0) close(r1) 18:04:54 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @random="d6ff24546e14", @val, {@ipv6}}, 0x0) 18:04:54 executing program 3: select(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 18:04:54 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, 0x0, 0x0) 18:04:54 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000280)={@broadcast, @local, @val, {@ipv6}}, 0x0) 18:04:54 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000), 0x10) 18:04:54 executing program 0: accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x4a) 18:04:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000580)) select(0x40, &(0x7f0000000100)={0x3c}, 0x0, 0x0, 0x0) close(r0) 18:04:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x0) select(0x40, &(0x7f0000000040)={0x7ff}, 0x0, 0x0, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', 0x0) 18:04:54 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) fcntl$lock(r0, 0x7, 0x0) 18:04:54 executing program 0: r0 = socket(0x18, 0x8001, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x18, 0x1}, 0xc) 18:04:54 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x20000009}, 0x0) 18:04:54 executing program 2: syz_emit_ethernet(0x56, &(0x7f0000000000)={@random="0f8de51c1980", @local, @val, {@ipv4}}, 0x0) 18:04:54 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="0f8de51c1980", @local, @val, {@ipv4}}, 0x0) 18:04:54 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) select(0x40, &(0x7f0000000080)={0x8}, 0x0, 0x0, 0x0) close(r0) [ 677.633225][ T4601] Bluetooth: hci7: command 0x0406 tx timeout [ 677.633481][T17442] Bluetooth: hci6: command 0x0406 tx timeout 18:04:55 executing program 1: pipe(&(0x7f0000000040)) getrlimit(0x0, &(0x7f0000000080)) 18:04:55 executing program 3: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x0, 0xffffffffffffffff}}) 18:04:55 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) fcntl$lock(r0, 0x9, 0x0) 18:04:55 executing program 0: getrusage(0x641174c75d100d0d, 0x0) 18:04:55 executing program 3: openat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0, 0x0) 18:04:55 executing program 1: r0 = socket(0x18, 0x2, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0x18, 0x3}, 0xc) 18:04:55 executing program 3: socket(0x0, 0x0, 0x9) 18:04:55 executing program 2: faccessat(0xffffffffffffffff, 0x0, 0x0) 18:04:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000680)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="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", 0xfe}, {&(0x7f0000000100)="49f8056ff828ad12bb4e3677f4d60f8fc037afcb56dfb316f4bf5850ea7c1b4f81e18ebeb4a1c61e370454aa098a6d4ce76d4e31ba9c51d4f110d618a3c42322bfb724d854db", 0x46}, {&(0x7f00000006c0)="4f5ef2b1b035451b31f342c93f8576c62cc7cb79c23b5d12106248618164105f2db91506e8c8804fd2f010394db73919a40a94753da50c836d09c25d7120df938c1580beb56b142c238a72a7607c9934c278c87d3fd72b166796dea3b68a4e5f5a6f4f36efe8f8cb7074966e9d8dc011b9c4394e9df6401d3a6430551341d01d8eb78a23ae981227bf7063fc6859dce6e3c0ff7af41ce02aeef1ed8017865633b5268b844382ba", 0xa7}, {&(0x7f0000000780)="b59f7cd5b6ba12f87a89598f7c5f74675d8efa473e59", 0x16}], 0x4}, 0x0) 18:04:55 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 18:04:55 executing program 3: syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @remote, @val, {@ipv4}}, 0x0) 18:04:55 executing program 1: syz_emit_ethernet(0x7ff, &(0x7f0000000400)={@random="566a15fb6da7", @empty, @val, {@ipv6}}, 0x0) 18:04:55 executing program 0: socket$unix(0x1, 0xdaae856bfd83174b, 0x0) 18:04:55 executing program 3: setitimer(0x0, &(0x7f0000000040)={{}, {0x80000001}}, 0x0) setitimer(0x0, &(0x7f0000000100), 0x0) 18:04:55 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="0f8de51c1980", @local, @val, {@ipv4}}, 0x0) 18:04:55 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind(r0, &(0x7f0000000100)=@in6={0x18, 0x1}, 0xc) 18:04:55 executing program 1: syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @random="8b8e94cb4e60", @val, {@ipv4}}, 0x0) 18:04:55 executing program 3: syz_emit_ethernet(0x218, &(0x7f00000002c0)={@local, @empty, @val, {@ipv6}}, 0x0) 18:04:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) fcntl$lock(r0, 0x9, 0x0) 18:04:55 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="0f8de51c1980", @local, @val, {@ipv4}}, 0x0) 18:04:55 executing program 1: socket$unix(0x1, 0x1, 0x0) select(0x40, &(0x7f0000000100), &(0x7f0000000140)={0xfffffffffffffffe}, 0x0, 0x0) 18:04:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r0, 0x0, 0x0) 18:04:55 executing program 3: socket(0x1, 0x0, 0x1) 18:04:55 executing program 2: syz_emit_ethernet(0xe, &(0x7f0000000140)={@local, @remote}, 0x0) 18:04:55 executing program 1: r0 = socket(0x18, 0x8001, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000180)) 18:04:55 executing program 3: clock_getres(0x0, &(0x7f00000000c0)) clock_getres(0x2, &(0x7f0000000000)) 18:04:55 executing program 2: syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @random="a60787b0c189", @val, {@ipv4}}, 0x0) [ 678.462144][ T37] audit: type=1400 audit(1695578695.459:546): avc: denied { setattr } for pid=17943 comm="syz-executor.0" name="" dev="pipefs" ino=53289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 18:04:55 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fcntl$getown(r0, 0x5) 18:04:55 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="97ee2634e2dd936109b9303369f887ce328b1d0812d02392338887f139d93cba6603c4397627e2c58391325fefed699f738c3b036331fe06d187b4b847f69fedcd8a827652bb299ecb2f7f37210f9d31ba7b202a41d8f092ce43bbfa1f2687b0b74084b6f63331b765326301e3706277f7691730400785ce"}, {&(0x7f0000000080)="d11190afc7564b9a2ba897357148244dd6035aca71ab6fbb12c127bd6d0c9591a4e04fe6388880594acad0b568d5a979c43b4d57de4e51a340576ca6049dca059dc596ac27343be65571b52878bfeee88e79de59dced9c03855268e43e19210fc96444e03c670c3dd48c9302b2f16107918f48dd8b8006045d5cf8717945889abbdb8ffae998bf143fa70265d462b3ff96264619648800e39e38a3bf0072e5440d886282b82c76a8d610cd3772a45f91812ba0753613920f9b21a13926312e865515291b8bbd00f7a990a19bcf5b67c09837b848b223a71928f15f"}, {&(0x7f0000000180)="a71185aa16fd39181948ed153a6918ec4b42cd130d9fa1611436720e320f7f50f60b28788909603a6dee0e495b97cda7c7568e1c3cfbc3e074a309b8ecc0c7c5af4c0c0e12eaa484e6a4c5809b381f6e8f912ce8cfaca2888c10da231ee46847098a97e88efca0c1e57b7d6a07ad45c812c6fa2ddf90e6c606933d24265e6a721ffc84ef28e6a81b8aa1d27a5e99b22d4467ff03b8b71c86e210d10994c7273ed60b84ec791e4bbd7e47ae28c8cbcd113f13b2d0530abf0b30fba35624162199159b2c", 0x5f}, {&(0x7f0000000280)="4ec95d568a017ee4c11f3e6cc2be0c94655c11389630fd7ec3232bbbefb9d80d2f0b9c39358828839185433e32331e45daa9a6a46e26f2c25ed7ca71860dff30e0a149dbfb0584c1b444f3da7b7e32e430c436215bbe39cd9ca0733d7ba64fc705a5264dad99f0f793108256fb15e1297dec7571523f476169555b7f9d84bb2ac94d63eaf6c4e28b8bf745e6"}, {&(0x7f0000000340)="44a41fa511e69d702e0763298ab052707f63e30c43060e55d54a9aaa0b6e084b06f30ad916bb84f0d669dfa3e4d78adda6e63160313bd55a98a78ebff5ffdfb9999218d79d62f937cca648bee9474feaf13f9de02cdba2bffc9dd0b89b47d244576d9c60bf9f1acecd689817ddd8487d7a3efbf1866d597f9cd61081a3150bcd0d79eacce3a8f2e5bdfde22e07d0079e48fb729ae5c52933b070242bbd4a3896648d3510fa952df9a2c91a1f"}], 0x10000043}, 0x0) 18:04:55 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast, @local, @val, {@ipv6}}, 0x0) 18:04:55 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000240)={@random="0f8de51c1980", @empty, @val, {@ipv4}}, 0x0) 18:04:55 executing program 1: syz_emit_ethernet(0x4e1, &(0x7f00000002c0)={@local, @empty, @val, {@ipv6}}, 0x0) 18:04:55 executing program 0: pwritev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000000)="09b9c07e9d90b76663be80f402be1fc4acdf3ac87a27b6b785df6741aa3c64604871bd5026235a0cec45b74c36f6da3fff3e607f9b8d459ba3e35251b17b5511e46c82dd508ab349356d4b3dec98ce988b23611bd08c8ee42f41a34ff3a325947beb5ecfb71a6288548d5bf97ca4bccb34a15ba7e521afda226c25469f1cbbcdaccb48d3ed866bc61b70a4160abe2c692fa72a00a49fd0b622e7110d0660acb90c2865e1d15d24309fbc73b1866be2f6bd95c38f254144570e8409c909eb8ba0c32aa7f443da33fb62e32705d05748cd9756be5be4944de00ee1847fa0cdd939b29256585b2e42d2c66a3c5704", 0xed}, {&(0x7f0000000100)="1bc12a57f1cac3ce89d5d8d2f5311a66be74e5cdc15b0c7370b100585c42fff295a0fc4b3421d0fb18d9cf5388ed85cfba14e56240c85ef837813c84adccfb2a1fa09a46e15d30111810737ee44f4c204566ccff0acc3720dd4f4758eff445509b43df5345cefe1dd96b180440990ba7664f30917d4090c263f50e605cf82a1c0a07a9e9236bfd98be08983ff280a7060c9f9ed250aaab043208cc78796add22f2812adbb7b95597546e0a2e97edf7933365caa715af8e520b11020e7c567a22b7374322ecf2700aca74", 0xca}, {&(0x7f0000000200)="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", 0xfffffffffffffdbe}, {&(0x7f0000001200)="90da3e58689c9950c0f8343a448a57848361b1e2883b96064e58e8aa0d1ea199e2bf47940bfde12556c818e8ccd31564584e749f86d935879a11bb74e862ef6f873ddd6cd69d3f5621877ebe3dd885725f38b9a92cff1660768bbc14ed5b78ade209bf3a238b913d7c5a855313f7d16e7d794e89bb435b43e95680c834b24f4692c7565416b74addac08bcae542cd79813730d07e43608ab22e0b9497edc969816f8216db7bc22dcb59ea9", 0xab}], 0x4, 0x8, 0x0) 18:04:55 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x8, 0x0, 0x0) 18:04:55 executing program 3: syz_emit_ethernet(0x4f, &(0x7f0000000200)={@broadcast, @local, @val, {@ipv6}}, 0x0) 18:04:55 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) 18:04:55 executing program 2: syz_emit_ethernet(0x26, &(0x7f0000000400)={@remote, @local, @val, {@ipv4}}, 0x0) 18:04:55 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @val, {@ipv4}}, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 18:04:55 executing program 3: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) r1 = dup(r0) fchdir(r1) 18:04:55 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001e80), 0x0, 0x0) connect(r0, 0x0, 0x0) 18:04:55 executing program 2: r0 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) 18:04:55 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @local, @val, {@ipv4}}, 0x0) 18:04:55 executing program 1: r0 = socket(0x2, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$sock_linger(r1, 0xffff, 0x80, 0x0, 0x0) 18:04:55 executing program 2: setitimer(0x0, &(0x7f0000000100)={{}, {0x0, 0x7fffffff}}, 0x0) 18:04:55 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000040)) 18:04:55 executing program 3: syz_emit_ethernet(0x12, &(0x7f00000008c0)={@broadcast, @local}, 0x0) 18:04:55 executing program 1: select(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)) 18:04:55 executing program 2: accept$inet(0xffffffffffffffff, &(0x7f0000000a80), 0x0) 18:04:55 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @val, {@ipv6}}, 0x0) 18:04:55 executing program 1: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 18:04:55 executing program 2: open$dir(0x0, 0x0, 0x20) openat$zero(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) 18:04:55 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @empty, @val, {@ipv4}}, 0x0) 18:04:55 executing program 3: r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x200, 0x0) linkat(r0, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 18:04:55 executing program 1: r0 = socket(0x18, 0x2, 0x0) bind$unix(r0, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0xa) 18:04:55 executing program 2: shmget(0x1, 0x4000, 0x610, &(0x7f0000ffb000/0x4000)=nil) 18:04:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) 18:04:55 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @local, @val, {@ipv4}}, 0x0) [ 678.670116][ T37] audit: type=1400 audit(1695578695.669:547): avc: denied { bind } for pid=18004 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 18:04:55 executing program 1: syz_emit_ethernet(0x2d1, &(0x7f00000002c0)={@local, @empty, @val, {@ipv6}}, 0x0) 18:04:55 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) 18:04:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8) 18:04:55 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000140)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000100)=[@rights], 0x10}, 0x401) 18:04:55 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000180), 0x4) 18:04:55 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) shutdown(r0, 0x1) 18:04:55 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003180)={0x0, 0x8000000000000001}) 18:04:55 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) renameat(r0, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0) 18:04:55 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, 0x0, 0x0) 18:04:55 executing program 0: syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @empty, @val, {@ipv6}}, 0x0) [ 678.744639][ T5191] Bluetooth: hci10: command 0x0419 tx timeout 18:04:55 executing program 3: r0 = socket(0x18, 0x8001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000000)={0x18}, 0xc) 18:04:55 executing program 2: msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3) 18:04:55 executing program 1: syz_emit_ethernet(0xe, &(0x7f0000001500)={@broadcast, @local, @val, {@generic={0x8847}}}, 0x0) 18:04:55 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x1}, 0x0) 18:04:55 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 18:04:55 executing program 2: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0xfffffffffffffff7}, 0x0, 0x0) select(0x40, &(0x7f0000000100)={0x5}, &(0x7f0000000140)={0x2}, 0x0, 0x0) 18:04:55 executing program 3: select(0x0, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) 18:04:55 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040)={0x10000000000000}, 0x10) 18:04:55 executing program 0: r0 = getuid() setreuid(r0, 0x0) 18:04:55 executing program 1: syz_emit_ethernet(0x23bf, &(0x7f0000002540)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 18:04:55 executing program 2: syz_emit_ethernet(0x142d, &(0x7f0000001a00)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6c7579af13f737000000000000000000000000000000000000000000000000000000ffff"], 0x0) 18:04:55 executing program 2: open$dir(&(0x7f00000002c0)='./file0\x00', 0x610, 0x0) 18:04:55 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003280)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 18:04:55 executing program 1: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x7fffffff}) [ 679.153437][ T5191] Bluetooth: hci11: command 0x0419 tx timeout 18:04:56 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)) 18:04:56 executing program 0: r0 = socket(0x2, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0x18}, 0xc) 18:04:56 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000040), &(0x7f0000000080)=0x10) 18:04:56 executing program 2: bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) bind$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) getgroups(0x0, 0x0) 18:04:56 executing program 3: fcntl$setown(0xffffffffffffffff, 0x6, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 18:04:56 executing program 0: symlinkat(&(0x7f00000007c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00') open$dir(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) chown(&(0x7f00000009c0)='./file1\x00', 0x0, 0x0) 18:04:56 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000440)='./file1\x00', 0x0, 0x0) 18:04:56 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x10, 0x0, &(0x7f0000001040)) 18:04:56 executing program 0: recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 18:04:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 18:04:56 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/114, 0x72}, 0x0) 18:04:56 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x10, 0x0, 0x0) 18:04:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 18:04:56 executing program 3: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x1}, 0x0, 0x0) pipe(&(0x7f0000000140)) select(0x40, &(0x7f0000000100)={0x5}, &(0x7f0000000140)={0x2}, 0x0, 0x0) 18:04:56 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000001700)={@random="cc6807ca0496", @broadcast, @val, {@ipv6}}, 0x0) 18:04:56 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 18:04:56 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 18:04:56 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) [ 679.966301][ T37] audit: type=1804 audit(1695578696.969:548): pid=18099 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir1197137401/syzkaller.Kwv5Yd/68/bus/file0" dev="overlay" ino=1971 res=1 errno=0 [ 679.983175][ T37] audit: type=1804 audit(1695578696.979:549): pid=18100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir2293310017/syzkaller.dDkJ56/1283/bus/file0" dev="overlay" ino=1979 res=1 errno=0 [ 680.255625][ T37] audit: type=1804 audit(1695578697.259:550): pid=18097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir1197137401/syzkaller.Kwv5Yd/68/bus/file0" dev="overlay" ino=1971 res=1 errno=0 [ 680.389222][ T37] audit: type=1804 audit(1695578697.389:551): pid=18098 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir2293310017/syzkaller.dDkJ56/1283/bus/file0" dev="overlay" ino=1979 res=1 errno=0 18:04:57 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:04:57 executing program 3: creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:04:57 executing program 2: r0 = creat(0x0, 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:04:57 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000005780)={[{@lazytime}, {@noinline_xattr}, {@lazytime}, {@nobarrier}, {@four_active_logs}, {@data_flush}, {@lfs_mode}, {@six_active_logs}]}, 0x1, 0x54e6, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 18:04:57 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:04:57 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:04:58 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000005780)={[{@lazytime}, {@noinline_xattr}, {@lazytime}, {@nobarrier}, {@four_active_logs}, {@data_flush}, {@lfs_mode}, {@six_active_logs}]}, 0x1, 0x54e6, &(0x7f0000000140)="$eJzs3MtrY1UYAPAv7XTejkVcuJsLg9DCJEw6D3Q36gw+sEPxsXClaZKGzCS5pUnT2pULl+LC/0QUXLn0b3Dh2p24UNwJSu651akPEJo2dvr7wc13z8nJd78ThoHv3pIATq3F7JefKnElLkTEfERcjijOK+VRuJvCcxFxNSLmHjsq5fwfE2cj4mJEXJkkTzkr5VufXR9fu/3jGz9//e25M5c+/+q72e0amLXnI6K/mc53+inmnRQflvONcbeI/VvjMqY3+o/KcZ7iTnu9yLDT2F/XKOLNTlqfb24PJ3Gj12hOYqe7UcxvDtIFh+POfp7iAw8bW8W41V4vYneYF7Gzl+ra3Uv/t+0NRylPq8z3YZE+RqP9mObbu+20n81HRWwORuV8ypu32ruTOC5jeblo5r1WUcf6Yb7p/7c3u4Pt3Wzc3hp280F2u1Z/oVa/U61v5a32qH2r2ui37tzKljq9ybLqqN3o3+3keafXrjXz/nK21Gk2q/V6tnSvvd5tDLJ6vXazdqN6e7k8u569+uDdrNfKlibx5e5ge9TtDbONfCtLn1jOVmo3X1zOrtWzt1fXsrW37t9fXXvn/XvvPXhp9fVXykV/KytbWrmxslKt36iu1JdP0f4/Loue4v7hUCqzLgDg5NH/A7Nw0vv/0P9PxYnqf097/38E+4dD0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxa3y988VpxspjGl8r5p8qpZ8pxJSLmIuK3fzAfZw/knC/zLPzL+oW/1PBNJYoMk2ucK4+LEXG3PH59+qi/BQAAAHhyffnR1U9Tt55eFmddEMcp3bSZu/zBlPJVImJh8YcpZZubvDw7pWTFv+8zsTulbMUNrPNTSpZuuZ2ZVrb/ZP5AOP9YqKQwd6zlAAAAx+JgJ3C8XQgAAADH6ZNZF8BsVGL/Ueb+s+DiL+//fCB44cAIAAAAOIEqsy4AAAAAOHJF/+/3/wAAAODJln7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4nZ37yUkdiuIAfFroe7w/RmKcuxVnsAyX4NChYQFugiXgFtwAa8CZSzBgaEu0BhOT3raRfF/SXm5DfpwSJudeUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0nOxmj/eXz20zdnu2klzNwAAAMAxm2I1L19Mq/m/+vpZfeminmcRkUfEsd59FL8amaM6p/ji/cWnGp4iyoT9Z/yuj78RcV0fr+ddfwsAAABwutaL5azq1qvTdOiC6FO1aJP/v0mUl0VEMX1JlJbvT5eJwsrf9zjuEqWVC1iTRGHVkts4Vdq3jBrD5MOQVUPeazkAAEAvmp1Av10IAAAAfbodugCGkcVhK/OwF1z+8/59Q/BPYwYAAAD8QNnQBQAAAACdK/t/z/8DAACA01Y9/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubYrVfL1YztrmbHftpLkbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I39eUeBEAiDMNi7vjOZ+x9WGjQ1NakC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDe/+8v/ialxJpl7bSw9jyRrp8bWqbF3bhz9YXz9GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgi373y/+JqXEmmTttLB2PJGtXja2rxt6DxtGD8fZvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbu5zWOKg4A+JuZna2timuUPUREwYNe7HZbW3v1oAQP/glCSLc1uvVHm4MtRcjFm+Sci+hRRFDiLf9DzgnkEm857CGCZ2VmZ5LJD3A1dGaTfD7w5n13GOZ93ySEfOe9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR67yBOskNnHMfFuc29JwtZv3Wkz6yvbM9mLYujOpM+G16tfoi6zSUCAADAxZGU9X0IYSddm8v6uJPX/2l5TVbz//D8OC7r+aN1f9mXtX/Wfv9t9+X9gTrjcbKb3l0cDq4dT6X19GY53V741yta+ZPP370k+Rck/nD5pVGaP8/ou42N99t5eKmObAGA/+Nq2RdB+ftQ1vebTAyAC6NVKbzL+j/pNJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB1Gy+HZMo5CCLOtgziztfdk4aR+fWV7tmy3VldXqvfMbpGGEO4uDgfXapzLtHv46PFn88Ph4EH9wWshhOZGL4KPJ7gmhCYzFJw2iIvv9WnJ52wEDf9gAgDg3EmLltX1O+naXHYumgnh7x8P1/9vVuIwYf2/+8mtzepY1fq/X9sMp19v6f6XvYePHr+9eH/+3uDe4PN3rvff7d+4ffPm7V7+rqTnjQkAAACn0y5atf6PZ46v/1+pxGHC+v+r7/vfVMdK1P8nOlj0azoTAACAi+3F1//6MzrhfNRuh6/nl5Ye9MfH/c/Xx8cGUv3PLhWtWv8nM01nBQAAANRhtBwdWv+/U4nDhOv/z/30yi/VeyYhhMvF+v/VhS+Gd+qbzlSr48+Jm54jAAAAzbpctOr6f5rv/4/3tzzEIYS33hjHxb8BnKj+Tz749ufqWNX9/zfqm+JUirvj55H33RBa3aYzAgAA4Dx7pmhZsf9Hujb36a9XPmrb/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQt38CAAD//7HmQWY=") r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 18:04:58 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000005780)={[{@lazytime}, {@noinline_xattr}, {@lazytime}, {@nobarrier}, {@four_active_logs}, {@data_flush}, {@lfs_mode}, {@six_active_logs}]}, 0x1, 0x54e6, &(0x7f0000000140)="$eJzs3MtrY1UYAPAv7XTejkVcuJsLg9DCJEw6D3Q36gw+sEPxsXClaZKGzCS5pUnT2pULl+LC/0QUXLn0b3Dh2p24UNwJSu651akPEJo2dvr7wc13z8nJd78ThoHv3pIATq3F7JefKnElLkTEfERcjijOK+VRuJvCcxFxNSLmHjsq5fwfE2cj4mJEXJkkTzkr5VufXR9fu/3jGz9//e25M5c+/+q72e0amLXnI6K/mc53+inmnRQflvONcbeI/VvjMqY3+o/KcZ7iTnu9yLDT2F/XKOLNTlqfb24PJ3Gj12hOYqe7UcxvDtIFh+POfp7iAw8bW8W41V4vYneYF7Gzl+ra3Uv/t+0NRylPq8z3YZE+RqP9mObbu+20n81HRWwORuV8ypu32ruTOC5jeblo5r1WUcf6Yb7p/7c3u4Pt3Wzc3hp280F2u1Z/oVa/U61v5a32qH2r2ui37tzKljq9ybLqqN3o3+3keafXrjXz/nK21Gk2q/V6tnSvvd5tDLJ6vXazdqN6e7k8u569+uDdrNfKlibx5e5ge9TtDbONfCtLn1jOVmo3X1zOrtWzt1fXsrW37t9fXXvn/XvvPXhp9fVXykV/KytbWrmxslKt36iu1JdP0f4/Loue4v7hUCqzLgDg5NH/A7Nw0vv/0P9PxYnqf097/38E+4dD0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxa3y988VpxspjGl8r5p8qpZ8pxJSLmIuK3fzAfZw/knC/zLPzL+oW/1PBNJYoMk2ucK4+LEXG3PH59+qi/BQAAAHhyffnR1U9Tt55eFmddEMcp3bSZu/zBlPJVImJh8YcpZZubvDw7pWTFv+8zsTulbMUNrPNTSpZuuZ2ZVrb/ZP5AOP9YqKQwd6zlAAAAx+JgJ3C8XQgAAADH6ZNZF8BsVGL/Ueb+s+DiL+//fCB44cAIAAAAOIEqsy4AAAAAOHJF/+/3/wAAAODJln7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4nZ37yUkdiuIAfFroe7w/RmKcuxVnsAyX4NChYQFugiXgFtwAa8CZSzBgaEu0BhOT3raRfF/SXm5DfpwSJudeUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0nOxmj/eXz20zdnu2klzNwAAAMAxm2I1L19Mq/m/+vpZfeminmcRkUfEsd59FL8amaM6p/ji/cWnGp4iyoT9Z/yuj78RcV0fr+ddfwsAAABwutaL5azq1qvTdOiC6FO1aJP/v0mUl0VEMX1JlJbvT5eJwsrf9zjuEqWVC1iTRGHVkts4Vdq3jBrD5MOQVUPeazkAAEAvmp1Av10IAAAAfbodugCGkcVhK/OwF1z+8/59Q/BPYwYAAAD8QNnQBQAAAACdK/t/z/8DAACA01Y9/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubYrVfL1YztrmbHftpLkbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I39eUeBEAiDMNi7vjOZ+x9WGjQ1NakC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDe/+8v/ialxJpl7bSw9jyRrp8bWqbF3bhz9YXz9GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgi373y/+JqXEmmTttLB2PJGtXja2rxt6DxtGD8fZvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbu5zWOKg4A+JuZna2timuUPUREwYNe7HZbW3v1oAQP/glCSLc1uvVHm4MtRcjFm+Sci+hRRFDiLf9DzgnkEm857CGCZ2VmZ5LJD3A1dGaTfD7w5n13GOZ93ySEfOe9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR67yBOskNnHMfFuc29JwtZv3Wkz6yvbM9mLYujOpM+G16tfoi6zSUCAADAxZGU9X0IYSddm8v6uJPX/2l5TVbz//D8OC7r+aN1f9mXtX/Wfv9t9+X9gTrjcbKb3l0cDq4dT6X19GY53V741yta+ZPP370k+Rck/nD5pVGaP8/ou42N99t5eKmObAGA/+Nq2RdB+ftQ1vebTAyAC6NVKbzL+j/pNJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB1Gy+HZMo5CCLOtgziztfdk4aR+fWV7tmy3VldXqvfMbpGGEO4uDgfXapzLtHv46PFn88Ph4EH9wWshhOZGL4KPJ7gmhCYzFJw2iIvv9WnJ52wEDf9gAgDg3EmLltX1O+naXHYumgnh7x8P1/9vVuIwYf2/+8mtzepY1fq/X9sMp19v6f6XvYePHr+9eH/+3uDe4PN3rvff7d+4ffPm7V7+rqTnjQkAAACn0y5atf6PZ46v/1+pxGHC+v+r7/vfVMdK1P8nOlj0azoTAACAi+3F1//6MzrhfNRuh6/nl5Ye9MfH/c/Xx8cGUv3PLhWtWv8nM01nBQAAANRhtBwdWv+/U4nDhOv/z/30yi/VeyYhhMvF+v/VhS+Gd+qbzlSr48+Jm54jAAAAzbpctOr6f5rv/4/3tzzEIYS33hjHxb8BnKj+Tz749ufqWNX9/zfqm+JUirvj55H33RBa3aYzAgAA4Dx7pmhZsf9Hujb36a9XPmrb/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQt38CAAD//7HmQWY=") r0 = open(0x0, 0x143042, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x6424) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 18:04:58 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:04:58 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) semget$private(0x0, 0x0, 0x0) creat(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:04:58 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000005780)={[{@lazytime}, {@noinline_xattr}, {@lazytime}, {@nobarrier}, {@four_active_logs}, {@data_flush}, {@lfs_mode}, {@six_active_logs}]}, 0x1, 0x54e6, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 18:04:58 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000005780)={[{@lazytime}, {@noinline_xattr}, {@lazytime}, {@nobarrier}, {@four_active_logs}, {@data_flush}, {@lfs_mode}, {@six_active_logs}]}, 0x1, 0x54e6, &(0x7f0000000140)="$eJzs3MtrY1UYAPAv7XTejkVcuJsLg9DCJEw6D3Q36gw+sEPxsXClaZKGzCS5pUnT2pULl+LC/0QUXLn0b3Dh2p24UNwJSu651akPEJo2dvr7wc13z8nJd78ThoHv3pIATq3F7JefKnElLkTEfERcjijOK+VRuJvCcxFxNSLmHjsq5fwfE2cj4mJEXJkkTzkr5VufXR9fu/3jGz9//e25M5c+/+q72e0amLXnI6K/mc53+inmnRQflvONcbeI/VvjMqY3+o/KcZ7iTnu9yLDT2F/XKOLNTlqfb24PJ3Gj12hOYqe7UcxvDtIFh+POfp7iAw8bW8W41V4vYneYF7Gzl+ra3Uv/t+0NRylPq8z3YZE+RqP9mObbu+20n81HRWwORuV8ypu32ruTOC5jeblo5r1WUcf6Yb7p/7c3u4Pt3Wzc3hp280F2u1Z/oVa/U61v5a32qH2r2ui37tzKljq9ybLqqN3o3+3keafXrjXz/nK21Gk2q/V6tnSvvd5tDLJ6vXazdqN6e7k8u569+uDdrNfKlibx5e5ge9TtDbONfCtLn1jOVmo3X1zOrtWzt1fXsrW37t9fXXvn/XvvPXhp9fVXykV/KytbWrmxslKt36iu1JdP0f4/Loue4v7hUCqzLgDg5NH/A7Nw0vv/0P9PxYnqf097/38E+4dD0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxa3y988VpxspjGl8r5p8qpZ8pxJSLmIuK3fzAfZw/knC/zLPzL+oW/1PBNJYoMk2ucK4+LEXG3PH59+qi/BQAAAHhyffnR1U9Tt55eFmddEMcp3bSZu/zBlPJVImJh8YcpZZubvDw7pWTFv+8zsTulbMUNrPNTSpZuuZ2ZVrb/ZP5AOP9YqKQwd6zlAAAAx+JgJ3C8XQgAAADH6ZNZF8BsVGL/Ueb+s+DiL+//fCB44cAIAAAAOIEqsy4AAAAAOHJF/+/3/wAAAODJln7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4nZ37yUkdiuIAfFroe7w/RmKcuxVnsAyX4NChYQFugiXgFtwAa8CZSzBgaEu0BhOT3raRfF/SXm5DfpwSJudeUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0nOxmj/eXz20zdnu2klzNwAAAMAxm2I1L19Mq/m/+vpZfeminmcRkUfEsd59FL8amaM6p/ji/cWnGp4iyoT9Z/yuj78RcV0fr+ddfwsAAABwutaL5azq1qvTdOiC6FO1aJP/v0mUl0VEMX1JlJbvT5eJwsrf9zjuEqWVC1iTRGHVkts4Vdq3jBrD5MOQVUPeazkAAEAvmp1Av10IAAAAfbodugCGkcVhK/OwF1z+8/59Q/BPYwYAAAD8QNnQBQAAAACdK/t/z/8DAACA01Y9/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubYrVfL1YztrmbHftpLkbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I39eUeBEAiDMNi7vjOZ+x9WGjQ1NakC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDe/+8v/ialxJpl7bSw9jyRrp8bWqbF3bhz9YXz9GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgi373y/+JqXEmmTttLB2PJGtXja2rxt6DxtGD8fZvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbu5zWOKg4A+JuZna2timuUPUREwYNe7HZbW3v1oAQP/glCSLc1uvVHm4MtRcjFm+Sci+hRRFDiLf9DzgnkEm857CGCZ2VmZ5LJD3A1dGaTfD7w5n13GOZ93ySEfOe9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDR67yBOskNnHMfFuc29JwtZv3Wkz6yvbM9mLYujOpM+G16tfoi6zSUCAADAxZGU9X0IYSddm8v6uJPX/2l5TVbz//D8OC7r+aN1f9mXtX/Wfv9t9+X9gTrjcbKb3l0cDq4dT6X19GY53V741yta+ZPP370k+Rck/nD5pVGaP8/ou42N99t5eKmObAGA/+Nq2RdB+ftQ1vebTAyAC6NVKbzL+j/pNJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB1Gy+HZMo5CCLOtgziztfdk4aR+fWV7tmy3VldXqvfMbpGGEO4uDgfXapzLtHv46PFn88Ph4EH9wWshhOZGL4KPJ7gmhCYzFJw2iIvv9WnJ52wEDf9gAgDg3EmLltX1O+naXHYumgnh7x8P1/9vVuIwYf2/+8mtzepY1fq/X9sMp19v6f6XvYePHr+9eH/+3uDe4PN3rvff7d+4ffPm7V7+rqTnjQkAAACn0y5atf6PZ46v/1+pxGHC+v+r7/vfVMdK1P8nOlj0azoTAACAi+3F1//6MzrhfNRuh6/nl5Ye9MfH/c/Xx8cGUv3PLhWtWv8nM01nBQAAANRhtBwdWv+/U4nDhOv/z/30yi/VeyYhhMvF+v/VhS+Gd+qbzlSr48+Jm54jAAAAzbpctOr6f5rv/4/3tzzEIYS33hjHxb8BnKj+Tz749ufqWNX9/zfqm+JUirvj55H33RBa3aYzAgAA4Dx7pmhZsf9Hujb36a9XPmrb/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQt38CAAD//7HmQWY=") r0 = open(0x0, 0x143042, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x6424) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 18:04:58 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) semget$private(0x0, 0x0, 0x0) creat(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 18:04:59 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000005780)={[{@lazytime}, {@noinline_xattr}, {@lazytime}, {@nobarrier}, {@four_active_logs}, {@data_flush}, {@lfs_mode}, {@six_active_logs}]}, 0x1, 0x54e6, &(0x7f0000000140)="$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") r0 = open(0x0, 0x143042, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x6424) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0xf501, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 18:04:59 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) semget$private(0x0, 0x0, 0x0) creat(0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) 18:04:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getpid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) fdatasync(r2) 18:04:59 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:04:59 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000005780)={[{@lazytime}, {@noinline_xattr}, {@lazytime}, {@nobarrier}, {@four_active_logs}, {@data_flush}, {@lfs_mode}, {@six_active_logs}]}, 0x1, 0x54e6, &(0x7f0000000140)="$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") r0 = open(0x0, 0x143042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x0, 0x6}) 18:04:59 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000005780)={[{@lazytime}, {@noinline_xattr}, {@lazytime}, {@nobarrier}, {@four_active_logs}, {@data_flush}, {@lfs_mode}, {@six_active_logs}]}, 0x1, 0x54e6, &(0x7f0000000140)="$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") r0 = open(0x0, 0x143042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x0, 0x6}) 18:05:00 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000005780)={[{@lazytime}, {@noinline_xattr}, {@lazytime}, {@nobarrier}, {@four_active_logs}, {@data_flush}, {@lfs_mode}, {@six_active_logs}]}, 0x1, 0x54e6, &(0x7f0000000140)="$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") r0 = open(0x0, 0x143042, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x0, 0x6}) 18:05:00 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:00 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getpid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000480)=ANY=[], 0x208e24b) fdatasync(r2) 18:05:00 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000480)=ANY=[], 0x208e24b) fdatasync(r1) 18:05:00 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000005640)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c646174615f666c757368006d6f64653d6c66732c6163746976655f6c6f67733d362c00b88d67e919f03cc3f4bb0a6e10f5a5e29475a58d6a05ff8efe8e62205638148b98df739f4ae0c3ceec93478816e994ec3fe6f0856cf275e2284f4db8579dc99f4129f4e651ea99f87874a5f40787fd4c58e2e9dc15a943e422e3c594dcfd615401299eec36e817075fc4a2a4cc275adc5e4dd3e3cd6782fe95cef487"], 0x1, 0x54e6, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000005b40)=[{&(0x7f0000005740)}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4004f50d, &(0x7f0000000100)) 18:05:01 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000005640)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c646174615f666c757368006d6f64653d6c66732c6163746976655f6c6f67733d362c00b88d67e919f03cc3f4bb0a6e10f5a5e29475a58d6a05ff8efe8e62205638148b98df739f4ae0c3ceec93478816e994ec3fe6f0856cf275e2284f4db8579dc99f4129f4e651ea99f87874a5f40787fd4c58e2e9dc15a943e422e3c594dcfd615401299eec36e817075fc4a2a4cc275adc5e4dd3e3cd6782fe95cef487"], 0x1, 0x54e6, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000005b40)=[{&(0x7f0000005740)}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4004f50d, &(0x7f0000000100)) 18:05:01 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') 18:05:01 executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000005640)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c646174615f666c757368006d6f64653d6c66732c6163746976655f6c6f67733d362c00b88d67e919f03cc3f4bb0a6e10f5a5e29475a58d6a05ff8efe8e62205638148b98df739f4ae0c3ceec93478816e994ec3fe6f0856cf275e2284f4db8579dc99f4129f4e651ea99f87874a5f40787fd4c58e2e9dc15a943e422e3c594dcfd615401299eec36e817075fc4a2a4cc275adc5e4dd3e3cd6782fe95cef487"], 0x1, 0x54e6, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000005b40), 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4004f50d, &(0x7f0000000100)) 18:05:01 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000005640)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c646174615f666c757368006d6f64653d6c66732c6163746976655f6c6f67733d362c00b88d67e919f03cc3f4bb0a6e10f5a5e29475a58d6a05ff8efe8e62205638148b98df739f4ae0c3ceec93478816e994ec3fe6f0856cf275e2284f4db8579dc99f4129f4e651ea99f87874a5f40787fd4c58e2e9dc15a943e422e3c594dcfd615401299eec36e817075fc4a2a4cc275adc5e4dd3e3cd6782fe95cef487"], 0x1, 0x54e6, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000005b40)=[{&(0x7f0000005740)}], 0x1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4004f50d, &(0x7f0000000100)) 18:05:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000480)=ANY=[], 0x208e24b) fdatasync(r3) 18:05:02 executing program 0: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'cp852'}}, {@umask={'umask', 0x3d, 0x5}}, {@file_umask={'file_umask', 0x3d, 0x1f}}, {@part={'part', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part={'part', 0x3d, 0xad4}}]}, 0x1, 0x2c9, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000740)={'syz0', "be8c9394451792ba0e50af4b00e78c081895e91a00a6ca2d10bf4b38d710d734147260a3cc87bee7ee6866863baf2a2f7b78ea5a60dfbf6256b6b28525386af14871069d"}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 18:05:02 executing program 0: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'cp852'}}, {@umask={'umask', 0x3d, 0x5}}, {@file_umask={'file_umask', 0x3d, 0x1f}}, {@part={'part', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part={'part', 0x3d, 0xad4}}]}, 0x1, 0x2c9, &(0x7f0000000bc0)="$eJzs3U9PE08cx/HPbAuUH4TfChgSjyiJJwN4MV4khvgYPBiiQk2IFRPFRL2Ino3xZuLdm2fjY9CL8QnoyZMnT8TLmpmd/tmyf6DYLrXvV0Kz7c6f73Rmu/td0lQARtbV9W/vLv6wf0aqqCLpshRIqklVSae1UHu0s7u926hv5TVUcTXsn1Fc0xwos7lTT6tq67kaXmifVTXd+Rr6I4qi6HthqV8DiQXlcUd/ikCa8Een218beGT9sVd2AGXomGGzr3091kyZ4QAAyufP/4E/S0z76/cgkJb8aX/Yz/+J65v98uI4EVrn/yB+Hhn7/vzvdrXzPZfC2Wu/oJklprVVtCbGFa+sxASYoqzSxRJM3tlu1C/suQZe6IrXUWzePW6pORAnL1pJiym5aY6C1nJMuTGM2TGsZsQ/10uPb9Jf3vh8iJjMJ/PFbJhQb7XVuv6rRsZOk5upsGum4viXs1t0owzjUolRtvP3U66TM74HfXzfHuVk1ihrqthY0thWzETXi2Ezztfj2bU0q+RthXh0K9mjc7XmUmuttp7/Tq01310rXs2b9xu5t1L6y7wy182ifuqD1juu/wM76UvKPjITR7lxJf3KyB1P1ZXMmMcEdwDfyz0ynx2imRF0LTV1z/dSt3VJMw+fPL17q9GoP2CjayNeiH45ppRRzW6MSep/PFUNYshjfmkkdhl/p+R4XWjvwHu4ll1Y0pqkE7ISlLqr+Tk1gDCaXSV2VTSRHljXxmSvvR/zMwlDoT3pWrhRdjAog73uMnH+15GvLLtPHfsQ5mQjUVHjHS2uZGRAs+7xvyNlcFPZGdxUc6Mg5zp7XjqX2ePz7mZDH6f+jf9KmnV91U3u/wMAAAAAAAAAAAAAAAAAAAybo34xoJevEyR77OFrlAAAAAAAAAAAAAAAAAAAAAAAjLih/f1fM5K/4An8VX8CAAD//+Lia5Q=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000740)={'syz0', "be8c9394451792ba0e50af4b00e78c081895e91a00a6ca2d10bf4b38d710d734147260a3cc87bee7ee6866863baf2a2f7b78ea5a60dfbf6256b6b28525386af14871069d"}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 18:05:02 executing program 1: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'cp852'}}, {@umask={'umask', 0x3d, 0x5}}, {@file_umask={'file_umask', 0x3d, 0x1f}}, {@part={'part', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part={'part', 0x3d, 0xad4}}]}, 0x1, 0x2c9, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000740)={'syz0', "be8c9394451792ba0e50af4b00e78c081895e91a00a6ca2d10bf4b38d710d734147260a3cc87bee7ee6866863baf2a2f7b78ea5a60dfbf6256b6b28525386af14871"}, 0x46) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 18:05:02 executing program 0: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'cp852'}}, {@umask={'umask', 0x3d, 0x5}}, {@file_umask={'file_umask', 0x3d, 0x1f}}, {@part={'part', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part={'part', 0x3d, 0xad4}}]}, 0x1, 0x2c9, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000740)={'syz0', "be8c9394451792ba0e50af4b00e78c081895e91a00a6ca2d10bf4b38d710d734147260a3cc87bee7ee6866863baf2a2f7b78ea5a60dfbf6256b6b28525386af14871069d"}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 18:05:02 executing program 1: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'cp852'}}, {@umask={'umask', 0x3d, 0x5}}, {@file_umask={'file_umask', 0x3d, 0x1f}}, {@part={'part', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part={'part', 0x3d, 0xad4}}]}, 0x1, 0x2c9, &(0x7f0000000bc0)="$eJzs3U9PE08cx/HPbAuUH4TfChgSjyiJJwN4MV4khvgYPBiiQk2IFRPFRL2Ino3xZuLdm2fjY9CL8QnoyZMnT8TLmpmd/tmyf6DYLrXvV0Kz7c6f73Rmu/td0lQARtbV9W/vLv6wf0aqqCLpshRIqklVSae1UHu0s7u926hv5TVUcTXsn1Fc0xwos7lTT6tq67kaXmifVTXd+Rr6I4qi6HthqV8DiQXlcUd/ikCa8Een218beGT9sVd2AGXomGGzr3091kyZ4QAAyufP/4E/S0z76/cgkJb8aX/Yz/+J65v98uI4EVrn/yB+Hhn7/vzvdrXzPZfC2Wu/oJklprVVtCbGFa+sxASYoqzSxRJM3tlu1C/suQZe6IrXUWzePW6pORAnL1pJiym5aY6C1nJMuTGM2TGsZsQ/10uPb9Jf3vh8iJjMJ/PFbJhQb7XVuv6rRsZOk5upsGum4viXs1t0owzjUolRtvP3U66TM74HfXzfHuVk1ihrqthY0thWzETXi2Ezztfj2bU0q+RthXh0K9mjc7XmUmuttp7/Tq01310rXs2b9xu5t1L6y7wy182ifuqD1juu/wM76UvKPjITR7lxJf3KyB1P1ZXMmMcEdwDfyz0ynx2imRF0LTV1z/dSt3VJMw+fPL17q9GoP2CjayNeiH45ppRRzW6MSep/PFUNYshjfmkkdhl/p+R4XWjvwHu4ll1Y0pqkE7ISlLqr+Tk1gDCaXSV2VTSRHljXxmSvvR/zMwlDoT3pWrhRdjAog73uMnH+15GvLLtPHfsQ5mQjUVHjHS2uZGRAs+7xvyNlcFPZGdxUc6Mg5zp7XjqX2ePz7mZDH6f+jf9KmnV91U3u/wMAAAAAAAAAAAAAAAAAAAybo34xoJevEyR77OFrlAAAAAAAAAAAAAAAAAAAAAAAjLih/f1fM5K/4An8VX8CAAD//+Lia5Q=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000740)={'syz0', "be8c9394451792ba0e50af4b00e78c081895e91a00a6ca2d10bf4b38d710d734147260a3cc87bee7ee6866863baf2a2f7b78ea5a60dfbf6256b6b28525386af14871"}, 0x46) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 18:05:02 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') 18:05:02 executing program 0: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'cp852'}}, {@umask={'umask', 0x3d, 0x5}}, {@file_umask={'file_umask', 0x3d, 0x1f}}, {@part={'part', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part={'part', 0x3d, 0xad4}}]}, 0x1, 0x2c9, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000740)={'syz0', "be8c9394451792ba0e50af4b00e78c081895e91a00a6ca2d10bf4b38d710d734147260a3cc87bee7ee6866863baf2a2f7b78ea5a60dfbf6256b6b28525386af14871"}, 0x46) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) [ 685.784945][ T1351] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.787709][ T1351] ieee802154 phy1 wpan1: encryption failed: -22 18:05:02 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') 18:05:02 executing program 1: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'cp852'}}, {@umask={'umask', 0x3d, 0x5}}, {@file_umask={'file_umask', 0x3d, 0x1f}}, {@part={'part', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part={'part', 0x3d, 0xad4}}]}, 0x1, 0x2c9, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000740)={'syz0', "be8c9394451792ba0e50af4b00e78c081895e91a00a6ca2d10bf4b38d710d734147260a3cc87bee7ee6866863baf2a2f7b78ea5a60dfbf6256b6b28525386af14871"}, 0x46) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 18:05:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[], 0x208e24b) fdatasync(r4) 18:05:02 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[], 0x208e24b) fdatasync(r4) 18:05:03 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') 18:05:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[], 0x208e24b) fdatasync(r4) 18:05:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[], 0x208e24b) fdatasync(r4) 18:05:03 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'cp852'}}, {@umask={'umask', 0x3d, 0x5}}, {@file_umask={'file_umask', 0x3d, 0x1f}}, {@part={'part', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part={'part', 0x3d, 0xad4}}]}, 0x1, 0x2c9, &(0x7f0000000bc0)="$eJzs3U9PE08cx/HPbAuUH4TfChgSjyiJJwN4MV4khvgYPBiiQk2IFRPFRL2Ino3xZuLdm2fjY9CL8QnoyZMnT8TLmpmd/tmyf6DYLrXvV0Kz7c6f73Rmu/td0lQARtbV9W/vLv6wf0aqqCLpshRIqklVSae1UHu0s7u926hv5TVUcTXsn1Fc0xwos7lTT6tq67kaXmifVTXd+Rr6I4qi6HthqV8DiQXlcUd/ikCa8Een218beGT9sVd2AGXomGGzr3091kyZ4QAAyufP/4E/S0z76/cgkJb8aX/Yz/+J65v98uI4EVrn/yB+Hhn7/vzvdrXzPZfC2Wu/oJklprVVtCbGFa+sxASYoqzSxRJM3tlu1C/suQZe6IrXUWzePW6pORAnL1pJiym5aY6C1nJMuTGM2TGsZsQ/10uPb9Jf3vh8iJjMJ/PFbJhQb7XVuv6rRsZOk5upsGum4viXs1t0owzjUolRtvP3U66TM74HfXzfHuVk1ihrqthY0thWzETXi2Ezztfj2bU0q+RthXh0K9mjc7XmUmuttp7/Tq01310rXs2b9xu5t1L6y7wy182ifuqD1juu/wM76UvKPjITR7lxJf3KyB1P1ZXMmMcEdwDfyz0ynx2imRF0LTV1z/dSt3VJMw+fPL17q9GoP2CjayNeiH45ppRRzW6MSep/PFUNYshjfmkkdhl/p+R4XWjvwHu4ll1Y0pqkE7ISlLqr+Tk1gDCaXSV2VTSRHljXxmSvvR/zMwlDoT3pWrhRdjAog73uMnH+15GvLLtPHfsQ5mQjUVHjHS2uZGRAs+7xvyNlcFPZGdxUc6Mg5zp7XjqX2ePz7mZDH6f+jf9KmnV91U3u/wMAAAAAAAAAAAAAAAAAAAybo34xoJevEyR77OFrlAAAAAAAAAAAAAAAAAAAAAAAjLih/f1fM5K/4An8VX8CAAD//+Lia5Q=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000740)={'syz0', "be8c9394451792ba0e50af4b00e78c081895e91a00a6ca2d10bf4b38d710d734147260a3cc87bee7ee6866863baf2a2f7b78ea5a60dfbf6256b6b28525386af14871069d"}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 18:05:04 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'cp852'}}, {@umask={'umask', 0x3d, 0x5}}, {@file_umask={'file_umask', 0x3d, 0x1f}}, {@part={'part', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part={'part', 0x3d, 0xad4}}]}, 0x1, 0x2c9, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000740)={'syz0', "be8c9394451792ba0e50af4b00e78c081895e91a00a6ca2d10bf4b38d710d734147260a3cc87bee7ee6866863baf2a2f7b78ea5a60dfbf6256b6b28525386af14871069d"}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 18:05:04 executing program 3: syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'cp852'}}, {@umask={'umask', 0x3d, 0x5}}, {@file_umask={'file_umask', 0x3d, 0x1f}}, {@part={'part', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@part={'part', 0x3d, 0xad4}}]}, 0x1, 0x2c9, &(0x7f0000000bc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000740)={'syz0', "be8c9394451792ba0e50af4b00e78c081895e91a00a6ca2d10bf4b38d710d734147260a3cc87bee7ee6866863baf2a2f7b78ea5a60dfbf6256b6b28525386af14871069d"}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 18:05:04 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (fail_nth: 1) [ 687.499670][T18249] FAULT_INJECTION: forcing a failure. [ 687.499670][T18249] name failslab, interval 1, probability 0, space 0, times 1 [ 687.506402][T18249] CPU: 2 PID: 18249 Comm: syz-executor.3 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 687.511249][T18249] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 687.515953][T18249] Call Trace: [ 687.517549][T18249] [ 687.518972][T18249] dump_stack_lvl+0x125/0x1b0 [ 687.521234][T18249] should_fail_ex+0x496/0x5b0 [ 687.523438][T18249] should_failslab+0x9/0x20 [ 687.525562][T18249] __kmem_cache_alloc_node+0x5f/0x470 [ 687.528036][T18249] ? tomoyo_realpath_from_path+0xb9/0x710 [ 687.530678][T18249] __kmalloc+0x4f/0x100 [ 687.532677][T18249] tomoyo_realpath_from_path+0xb9/0x710 [ 687.535245][T18249] ? tomoyo_profile+0x47/0x60 [ 687.537464][T18249] tomoyo_path_number_perm+0x241/0x580 [ 687.539955][T18249] ? tomoyo_path_number_perm+0x22e/0x580 [ 687.542537][T18249] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 687.545264][T18249] ? reacquire_held_locks+0x4b0/0x4b0 [ 687.547688][T18249] ? bit_wait_io_timeout+0x160/0x160 [ 687.550158][T18249] ? __fget_files+0x272/0x410 [ 687.552322][T18249] security_file_ioctl+0x72/0xb0 [ 687.554634][T18249] __x64_sys_ioctl+0xbb/0x210 [ 687.556837][T18249] do_syscall_64+0x38/0xb0 [ 687.558904][T18249] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 687.561638][T18249] RIP: 0033:0x7f815167cae9 [ 687.563696][T18249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 687.572330][T18249] RSP: 002b:00007f81523260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.576174][T18249] RAX: ffffffffffffffda RBX: 00007f815179bf80 RCX: 00007f815167cae9 [ 687.579793][T18249] RDX: 00000000200000c0 RSI: 0000000000003b86 RDI: 0000000000000003 [ 687.583383][T18249] RBP: 00007f8152326120 R08: 0000000000000000 R09: 0000000000000000 [ 687.586980][T18249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.590501][T18249] R13: 000000000000000b R14: 00007f815179bf80 R15: 00007ffc5aabd3b8 [ 687.594159][T18249] [ 687.601848][T18249] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:04 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (fail_nth: 2) 18:05:04 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (fail_nth: 3) 18:05:04 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:04 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (fail_nth: 4) 18:05:04 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') 18:05:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001700)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2) write$binfmt_script(r4, &(0x7f0000000480)=ANY=[], 0x208e24b) fdatasync(r4) [ 687.817722][T18255] FAULT_INJECTION: forcing a failure. [ 687.817722][T18255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 687.823413][T18255] CPU: 0 PID: 18255 Comm: syz-executor.3 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 687.827707][T18255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 687.831825][T18255] Call Trace: [ 687.833067][T18255] [ 687.834155][T18255] dump_stack_lvl+0x125/0x1b0 [ 687.835868][T18255] should_fail_ex+0x496/0x5b0 [ 687.837598][T18255] ? fs_reclaim_acquire+0xb0/0x150 [ 687.839857][T18255] __should_fail_alloc_page+0xe7/0x130 [ 687.842454][T18255] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 687.844832][T18255] ? prepare_alloc_pages.constprop.0+0x40c/0x550 [ 687.847293][T18255] __alloc_pages+0x14e/0x4a0 [ 687.849395][T18255] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 687.851999][T18255] ? mark_held_locks+0x9f/0xe0 [ 687.853838][T18255] cache_grow_begin+0x99/0x3a0 [ 687.855399][T18255] fallback_alloc+0x1d4/0x300 [ 687.856942][T18255] __kmem_cache_alloc_node+0x117/0x470 [ 687.859199][T18255] ? tomoyo_realpath_from_path+0xb9/0x710 [ 687.861730][T18255] __kmalloc+0x4f/0x100 [ 687.863482][T18255] tomoyo_realpath_from_path+0xb9/0x710 [ 687.865413][T18255] ? tomoyo_profile+0x47/0x60 [ 687.866994][T18255] tomoyo_path_number_perm+0x241/0x580 [ 687.868965][T18255] ? tomoyo_path_number_perm+0x22e/0x580 [ 687.871123][T18255] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 687.873167][T18255] ? reacquire_held_locks+0x4b0/0x4b0 [ 687.875006][T18255] ? bit_wait_io_timeout+0x160/0x160 [ 687.877108][T18255] ? __fget_files+0x272/0x410 [ 687.878852][T18255] security_file_ioctl+0x72/0xb0 [ 687.880888][T18255] __x64_sys_ioctl+0xbb/0x210 [ 687.882784][T18255] do_syscall_64+0x38/0xb0 [ 687.884980][T18255] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 687.887759][T18255] RIP: 0033:0x7f815167cae9 [ 687.889639][T18255] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 687.897278][T18255] RSP: 002b:00007f81523260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.900525][T18255] RAX: ffffffffffffffda RBX: 00007f815179bf80 RCX: 00007f815167cae9 [ 687.903506][T18255] RDX: 00000000200000c0 RSI: 0000000000003b86 RDI: 0000000000000003 [ 687.906688][T18255] RBP: 00007f8152326120 R08: 0000000000000000 R09: 0000000000000000 [ 687.910282][T18255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.914062][T18255] R13: 000000000000000b R14: 00007f815179bf80 R15: 00007ffc5aabd3b8 [ 687.917217][T18255] [ 687.921224][T18255] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:04 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (fail_nth: 5) [ 687.959018][T18258] FAULT_INJECTION: forcing a failure. [ 687.959018][T18258] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 687.964229][T18258] CPU: 0 PID: 18258 Comm: syz-executor.3 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 687.968054][T18258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 687.972351][T18258] Call Trace: [ 687.973660][T18258] [ 687.974784][T18258] dump_stack_lvl+0x125/0x1b0 [ 687.976573][T18258] should_fail_ex+0x496/0x5b0 [ 687.978545][T18258] _copy_to_user+0x30/0xb0 [ 687.980547][T18258] simple_read_from_buffer+0xd0/0x150 [ 687.982539][T18258] proc_fail_nth_read+0x1b0/0x280 [ 687.984403][T18258] ? proc_tid_comm_permission+0x1f0/0x1f0 [ 687.986507][T18258] ? security_file_permission+0xdc/0x100 [ 687.988625][T18258] ? proc_tid_comm_permission+0x1f0/0x1f0 [ 687.990755][T18258] vfs_read+0x1ce/0x930 [ 687.992284][T18258] ? kernel_read+0x1b0/0x1b0 [ 687.994053][T18258] ? __fget_files+0x272/0x410 [ 687.995798][T18258] ksys_read+0x12f/0x250 [ 687.997371][T18258] ? vfs_write+0xe40/0xe40 [ 687.999018][T18258] ? syscall_enter_from_user_mode+0x26/0x80 [ 688.001295][T18258] do_syscall_64+0x38/0xb0 [ 688.003150][T18258] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 688.005683][T18258] RIP: 0033:0x7f815167b78c [ 688.007324][T18258] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 688.015388][T18258] RSP: 002b:00007f81523260c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 688.018740][T18258] RAX: ffffffffffffffda RBX: 00007f815179bf80 RCX: 00007f815167b78c [ 688.021610][T18258] RDX: 000000000000000f RSI: 00007f8152326130 RDI: 0000000000000004 [ 688.024411][T18258] RBP: 00007f8152326120 R08: 0000000000000000 R09: 0000000000000000 [ 688.027758][T18258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.031152][T18258] R13: 000000000000000b R14: 00007f815179bf80 R15: 00007ffc5aabd3b8 [ 688.034824][T18258] 18:05:05 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:05 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x2, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:05 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x10, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:05 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x4b47, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:05 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:05 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:05 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x4b49, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:05 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:05 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x541b, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:05 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x5421, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:05 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x5450, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:05 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x5451, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:06 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:06 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (fail_nth: 1) 18:05:06 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x5452, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:06 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 1) 18:05:06 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x5460, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:06 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x8933, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:06 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x400448c9, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:06 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x400448dd, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 689.923773][T18313] FAULT_INJECTION: forcing a failure. [ 689.923773][T18313] name failslab, interval 1, probability 0, space 0, times 0 [ 689.929762][T18313] CPU: 3 PID: 18313 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 689.934649][T18313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 689.939368][T18313] Call Trace: [ 689.940993][T18313] [ 689.942398][T18313] dump_stack_lvl+0x125/0x1b0 [ 689.944651][T18313] should_fail_ex+0x496/0x5b0 [ 689.946923][T18313] should_failslab+0x9/0x20 [ 689.949110][T18313] __kmem_cache_alloc_node+0x5f/0x470 [ 689.951649][T18313] ? tomoyo_realpath_from_path+0xb9/0x710 [ 689.954381][T18313] __kmalloc+0x4f/0x100 [ 689.956377][T18313] tomoyo_realpath_from_path+0xb9/0x710 [ 689.959005][T18313] ? tomoyo_profile+0x47/0x60 [ 689.961245][T18313] tomoyo_path_number_perm+0x241/0x580 [ 689.963825][T18313] ? tomoyo_path_number_perm+0x22e/0x580 [ 689.966167][T18313] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 689.968388][T18313] ? reacquire_held_locks+0x4b0/0x4b0 [ 689.970958][T18313] ? bit_wait_io_timeout+0x160/0x160 [ 689.973523][T18313] ? __fget_files+0x272/0x410 [ 689.975797][T18313] security_file_ioctl+0x72/0xb0 [ 689.978160][T18313] __x64_sys_ioctl+0xbb/0x210 [ 689.980397][T18313] do_syscall_64+0x38/0xb0 [ 689.982527][T18313] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 689.985334][T18313] RIP: 0033:0x7fdf3487cae9 [ 689.987425][T18313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 689.996491][T18313] RSP: 002b:00007fdf3562c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.000415][T18313] RAX: ffffffffffffffda RBX: 00007fdf3499bf80 RCX: 00007fdf3487cae9 [ 690.004172][T18313] RDX: 00000000200001c0 RSI: 00000000c0405602 RDI: 0000000000000003 [ 690.007904][T18313] RBP: 00007fdf3562c120 R08: 0000000000000000 R09: 0000000000000000 [ 690.011306][T18313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.014981][T18313] R13: 000000000000000b R14: 00007fdf3499bf80 R15: 00007ffcfc2a4888 [ 690.018723][T18313] [ 690.021728][T18315] FAULT_INJECTION: forcing a failure. [ 690.021728][T18315] name failslab, interval 1, probability 0, space 0, times 0 [ 690.033123][T18315] CPU: 1 PID: 18315 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 690.033167][T18313] ERROR: Out of memory at tomoyo_realpath_from_path. [ 690.038067][T18315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 690.045359][T18315] Call Trace: [ 690.046965][T18315] [ 690.048394][T18315] dump_stack_lvl+0x125/0x1b0 [ 690.050653][T18315] should_fail_ex+0x496/0x5b0 [ 690.052947][T18315] should_failslab+0x9/0x20 [ 690.055138][T18315] kmem_cache_alloc+0x61/0x400 [ 690.057444][T18315] getname_flags.part.0+0x50/0x4d0 [ 690.059912][T18315] getname+0x90/0xe0 [ 690.061821][T18315] do_sys_openat2+0x100/0x1e0 [ 690.064087][T18315] ? build_open_flags+0x690/0x690 [ 690.066507][T18315] __x64_sys_open+0x154/0x1e0 [ 690.068799][T18315] ? do_sys_open+0x160/0x160 [ 690.071033][T18315] ? syscall_enter_from_user_mode+0x26/0x80 [ 690.073899][T18315] ? lockdep_hardirqs_on+0x7d/0x100 [ 690.076414][T18315] do_syscall_64+0x38/0xb0 [ 690.078579][T18315] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 690.081418][T18315] RIP: 0033:0x7f4ec1c7cae9 [ 690.083553][T18315] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 690.092559][T18315] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 690.096491][T18315] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 690.100230][T18315] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 690.103912][T18315] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 690.107643][T18315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.111368][T18315] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 690.115108][T18315] 18:05:07 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x400454ca, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:07 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (fail_nth: 2) 18:05:07 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:07 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 2) 18:05:07 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (fail_nth: 3) 18:05:07 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x40049409, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:07 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x40086602, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:07 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (fail_nth: 4) [ 690.379144][ T37] audit: type=1400 audit(1695578707.379:552): avc: denied { setattr } for pid=18324 comm="syz-executor.3" path="/dev/iommu" dev="devtmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 690.380684][T18327] FAULT_INJECTION: forcing a failure. [ 690.380684][T18327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.398149][T18327] CPU: 2 PID: 18327 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 18:05:07 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x40087602, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 690.404024][T18327] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 690.409390][T18327] Call Trace: [ 690.411002][T18327] [ 690.412525][T18327] dump_stack_lvl+0x125/0x1b0 [ 690.414797][T18327] should_fail_ex+0x496/0x5b0 [ 690.417111][T18327] _copy_to_user+0x30/0xb0 [ 690.419422][T18327] video_usercopy+0xf1d/0x15c0 [ 690.422153][T18327] ? v4l_print_tuner+0x2d0/0x2d0 [ 690.424760][T18327] ? v4l_enumstd+0x60/0x60 [ 690.426967][T18327] v4l2_ioctl+0x1bd/0x250 [ 690.429230][T18327] ? v4l2_write+0x350/0x350 [ 690.431387][T18327] __x64_sys_ioctl+0x18f/0x210 [ 690.433620][T18327] do_syscall_64+0x38/0xb0 [ 690.436000][T18327] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 690.439233][T18327] RIP: 0033:0x7fdf3487cae9 [ 690.441688][T18327] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 690.450798][T18327] RSP: 002b:00007fdf3562c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.455060][T18327] RAX: ffffffffffffffda RBX: 00007fdf3499bf80 RCX: 00007fdf3487cae9 [ 690.459214][T18327] RDX: 00000000200001c0 RSI: 00000000c0405602 RDI: 0000000000000003 [ 690.463387][T18327] RBP: 00007fdf3562c120 R08: 0000000000000000 R09: 0000000000000000 [ 690.467332][T18327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.470893][T18327] R13: 000000000000000b R14: 00007fdf3499bf80 R15: 00007ffcfc2a4888 [ 690.474799][T18327] 18:05:07 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x40186366, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:08 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:08 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x401c5820, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:08 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (fail_nth: 5) 18:05:08 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 3) 18:05:08 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x4020940d, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 691.229131][T18344] FAULT_INJECTION: forcing a failure. [ 691.229131][T18344] name failslab, interval 1, probability 0, space 0, times 0 [ 691.235562][T18344] CPU: 3 PID: 18344 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 691.239646][T18344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 691.244238][T18344] Call Trace: [ 691.246190][T18344] [ 691.247864][T18344] dump_stack_lvl+0x125/0x1b0 [ 691.249723][T18344] should_fail_ex+0x496/0x5b0 [ 691.251891][T18344] should_failslab+0x9/0x20 [ 691.253837][T18344] __kmem_cache_alloc_node+0x5f/0x470 [ 691.256273][T18344] ? tomoyo_encode2+0x100/0x3d0 [ 691.258499][T18344] __kmalloc+0x4f/0x100 [ 691.260383][T18344] tomoyo_encode2+0x100/0x3d0 [ 691.262534][T18344] ? rcu_is_watching+0x12/0xb0 [ 691.264743][T18344] tomoyo_encode+0x29/0x50 [ 691.266787][T18344] tomoyo_realpath_from_path+0x196/0x710 [ 691.269293][T18344] tomoyo_path_number_perm+0x241/0x580 [ 691.271758][T18344] ? tomoyo_path_number_perm+0x22e/0x580 [ 691.274307][T18344] ? tomoyo_execute_permission+0x4a0/0x4a0 18:05:08 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x80086301, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 691.276687][T18344] ? reacquire_held_locks+0x4b0/0x4b0 [ 691.278949][T18344] ? bit_wait_io_timeout+0x160/0x160 [ 691.280995][T18344] ? __fget_files+0x272/0x410 [ 691.283096][T18344] security_file_ioctl+0x72/0xb0 [ 691.285154][T18344] __x64_sys_ioctl+0xbb/0x210 [ 691.287344][T18344] do_syscall_64+0x38/0xb0 [ 691.289285][T18344] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 691.291460][T18344] RIP: 0033:0x7fdf3487cae9 [ 691.293192][T18344] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 691.301813][T18344] RSP: 002b:00007fdf3562c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 691.305931][T18344] RAX: ffffffffffffffda RBX: 00007fdf3499bf80 RCX: 00007fdf3487cae9 18:05:08 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x80086601, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 691.309684][T18344] RDX: 00000000200001c0 RSI: 00000000c0405602 RDI: 0000000000000003 [ 691.313373][T18344] RBP: 00007fdf3562c120 R08: 0000000000000000 R09: 0000000000000000 [ 691.316621][T18344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.320304][T18344] R13: 000000000000000b R14: 00007fdf3499bf80 R15: 00007ffcfc2a4888 [ 691.323945][T18344] [ 691.327172][T18344] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:08 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x80087601, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 691.738736][T18361] FAULT_INJECTION: forcing a failure. [ 691.738736][T18361] name failslab, interval 1, probability 0, space 0, times 0 [ 691.743455][T18361] CPU: 2 PID: 18361 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 691.747204][T18361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 691.750859][T18361] Call Trace: [ 691.752082][T18361] [ 691.753211][T18361] dump_stack_lvl+0x125/0x1b0 [ 691.754934][T18361] should_fail_ex+0x496/0x5b0 [ 691.756674][T18361] should_failslab+0x9/0x20 [ 691.758350][T18361] kmem_cache_alloc+0x61/0x400 [ 691.760139][T18361] alloc_empty_file+0x73/0x1d0 [ 691.761917][T18361] path_openat+0xdc/0x29c0 [ 691.763563][T18361] ? path_lookupat+0x770/0x770 [ 691.765335][T18361] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 691.767530][T18361] do_filp_open+0x1de/0x430 [ 691.769248][T18361] ? may_open_dev+0xf0/0xf0 [ 691.770916][T18361] ? find_held_lock+0x2d/0x110 [ 691.772698][T18361] ? _raw_spin_unlock+0x28/0x40 [ 691.774478][T18361] ? alloc_fd+0x2da/0x6c0 [ 691.776061][T18361] do_sys_openat2+0x176/0x1e0 [ 691.777776][T18361] ? build_open_flags+0x690/0x690 [ 691.779672][T18361] __x64_sys_open+0x154/0x1e0 [ 691.781423][T18361] ? do_sys_open+0x160/0x160 [ 691.783128][T18361] ? syscall_enter_from_user_mode+0x26/0x80 [ 691.785302][T18361] ? lockdep_hardirqs_on+0x7d/0x100 [ 691.787207][T18361] do_syscall_64+0x38/0xb0 [ 691.788848][T18361] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 691.791055][T18361] RIP: 0033:0x7f4ec1c7cae9 [ 691.792724][T18361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 691.799780][T18361] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 691.803267][T18361] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 691.806821][T18361] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 691.810360][T18361] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 691.813920][T18361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.817468][T18361] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 691.821015][T18361] 18:05:09 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (fail_nth: 6) 18:05:09 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x801c581f, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 692.007640][T18363] FAULT_INJECTION: forcing a failure. [ 692.007640][T18363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.017756][T18363] CPU: 1 PID: 18363 Comm: syz-executor.0 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 692.023229][T18363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 692.028298][T18363] Call Trace: 18:05:09 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0xc0045878, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:09 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 4) 18:05:09 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) [ 692.030123][T18363] [ 692.031721][T18363] dump_stack_lvl+0x125/0x1b0 [ 692.034011][T18363] should_fail_ex+0x496/0x5b0 [ 692.036447][T18363] _copy_from_user+0x30/0xf0 [ 692.038995][T18363] kstrtouint_from_user+0xd7/0x1b0 [ 692.041749][T18363] ? kstrtouint+0x130/0x130 18:05:09 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0xc0045878, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 692.044195][T18363] ? lock_sync+0x190/0x190 [ 692.046568][T18363] proc_fail_nth_write+0x84/0x260 [ 692.049066][T18363] ? proc_task_getattr+0x230/0x230 [ 692.051018][T18363] vfs_write+0x2a4/0xe40 [ 692.052613][T18363] ? proc_task_getattr+0x230/0x230 [ 692.054861][T18363] ? kernel_write+0x6c0/0x6c0 [ 692.056981][T18363] ? __fget_files+0x272/0x410 [ 692.061172][T18363] ksys_write+0x12f/0x250 [ 692.062771][T18363] ? __ia32_sys_read+0xb0/0xb0 [ 692.065202][T18363] ? syscall_enter_from_user_mode+0x26/0x80 [ 692.067884][T18363] do_syscall_64+0x38/0xb0 [ 692.069794][T18363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 692.072666][T18363] RIP: 0033:0x7fdf3487b82f 18:05:09 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0xc0189436, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 692.074898][T18363] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 692.083005][T18363] RSP: 002b:00007fdf3562c0c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 692.087135][T18363] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdf3487b82f [ 692.091143][T18363] RDX: 0000000000000001 RSI: 00007fdf3562c130 RDI: 0000000000000004 [ 692.094918][T18363] RBP: 00007fdf3562c120 R08: 0000000000000000 R09: 0000000000000000 [ 692.098253][T18363] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 692.103865][T18363] R13: 000000000000000b R14: 00007fdf3499bf80 R15: 00007ffcfc2a4888 [ 692.107162][T18363] 18:05:09 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:09 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:09 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x2f, r1, 0xffffffffffffff54, 0xb3}) [ 692.435053][T18386] FAULT_INJECTION: forcing a failure. [ 692.435053][T18386] name failslab, interval 1, probability 0, space 0, times 0 [ 692.440510][T18386] CPU: 2 PID: 18386 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 692.444947][T18386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 692.449212][T18386] Call Trace: [ 692.450688][T18386] [ 692.451840][T18386] dump_stack_lvl+0x125/0x1b0 [ 692.453622][T18386] should_fail_ex+0x496/0x5b0 [ 692.455357][T18386] should_failslab+0x9/0x20 [ 692.457055][T18386] kmem_cache_alloc+0x61/0x400 [ 692.458837][T18386] security_file_alloc+0x41/0x250 [ 692.460850][T18386] init_file+0xb9/0x2d0 [ 692.462446][T18386] alloc_empty_file+0x91/0x1d0 [ 692.464351][T18386] path_openat+0xdc/0x29c0 [ 692.466305][T18386] ? path_lookupat+0x770/0x770 [ 692.468338][T18386] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 692.470776][T18386] do_filp_open+0x1de/0x430 [ 692.472760][T18386] ? may_open_dev+0xf0/0xf0 [ 692.474664][T18386] ? find_held_lock+0x2d/0x110 [ 692.476752][T18386] ? _raw_spin_unlock+0x28/0x40 [ 692.478852][T18386] ? alloc_fd+0x2da/0x6c0 [ 692.480676][T18386] do_sys_openat2+0x176/0x1e0 [ 692.482653][T18386] ? build_open_flags+0x690/0x690 [ 692.484513][T18386] __x64_sys_open+0x154/0x1e0 [ 692.486598][T18386] ? do_sys_open+0x160/0x160 [ 692.488621][T18386] ? syscall_enter_from_user_mode+0x26/0x80 [ 692.490843][T18386] ? lockdep_hardirqs_on+0x7d/0x100 [ 692.493071][T18386] do_syscall_64+0x38/0xb0 [ 692.494956][T18386] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 692.497702][T18386] RIP: 0033:0x7f4ec1c7cae9 [ 692.499748][T18386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 692.507663][T18386] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 692.510538][T18386] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 692.513512][T18386] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 692.516578][T18386] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 692.520082][T18386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.523378][T18386] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 692.526704][T18386] 18:05:09 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 5) 18:05:09 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:09 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x38, r1, 0xffffffffffffff54, 0xb3}) 18:05:09 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:09 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x10, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:09 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff5d, 0xb3}) 18:05:09 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4b47, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:09 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r5, 0x0, 0x3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r6, 0x101, 0x3, &(0x7f0000000100), 0x4) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000240)=0x1) fcntl$setown(r6, 0x8, r7) r8 = dup3(r0, r3, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2}, 0x1c) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r9, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000140)={0x38, 0x1, r9, 0x0, 0x8, 0x6d68}) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000100)) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r10, r11, 0x0, 0x800000080004105) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000040)={0x28, 0x3, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xffff}) r12 = syz_open_dev$vcsu(&(0x7f0000000280), 0x4, 0x400000) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r12, 0x3b88, &(0x7f0000000340)={0xc, r13}) [ 692.831365][ T37] audit: type=1400 audit(1695578709.829:553): avc: denied { setopt } for pid=18399 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 693.089506][T18405] FAULT_INJECTION: forcing a failure. [ 693.089506][T18405] name failslab, interval 1, probability 0, space 0, times 0 [ 693.095519][T18405] CPU: 0 PID: 18405 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 693.099801][T18405] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 693.103445][T18405] Call Trace: [ 693.104955][T18405] [ 693.106297][T18405] dump_stack_lvl+0x125/0x1b0 [ 693.108345][T18405] should_fail_ex+0x496/0x5b0 [ 693.110435][T18405] should_failslab+0x9/0x20 [ 693.112497][T18405] kmem_cache_alloc+0x61/0x400 [ 693.114640][T18405] security_file_alloc+0x41/0x250 [ 693.116930][T18405] init_file+0xb9/0x2d0 [ 693.118828][T18405] alloc_empty_file+0x91/0x1d0 [ 693.121006][T18405] path_openat+0xdc/0x29c0 [ 693.123040][T18405] ? path_lookupat+0x770/0x770 [ 693.125221][T18405] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 693.127934][T18405] do_filp_open+0x1de/0x430 [ 693.129747][T18405] ? may_open_dev+0xf0/0xf0 [ 693.131436][T18405] ? find_held_lock+0x2d/0x110 [ 693.133251][T18405] ? _raw_spin_unlock+0x28/0x40 [ 693.135079][T18405] ? alloc_fd+0x2da/0x6c0 [ 693.136823][T18405] do_sys_openat2+0x176/0x1e0 [ 693.138606][T18405] ? build_open_flags+0x690/0x690 [ 693.140624][T18405] __x64_sys_open+0x154/0x1e0 [ 693.142331][T18405] ? do_sys_open+0x160/0x160 [ 693.144003][T18405] ? syscall_enter_from_user_mode+0x26/0x80 [ 693.146160][T18405] ? lockdep_hardirqs_on+0x7d/0x100 [ 693.148038][T18405] do_syscall_64+0x38/0xb0 [ 693.149862][T18405] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 693.151989][T18405] RIP: 0033:0x7f4ec1c7cae9 [ 693.153659][T18405] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 693.161983][T18405] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 693.165729][T18405] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 693.168613][T18405] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 693.171541][T18405] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 693.174608][T18405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.178078][T18405] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 693.181497][T18405] 18:05:10 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 6) 18:05:10 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4b49, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:10 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r5, 0x0, 0x3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r6, 0x101, 0x3, &(0x7f0000000100), 0x4) (async) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000240)=0x1) (async) fcntl$setown(r6, 0x8, r7) r8 = dup3(r0, r3, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2}, 0x1c) (async) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r9, 0x0, 0x80000000}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000140)={0x38, 0x1, r9, 0x0, 0x8, 0x6d68}) (async) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000100)) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r10, r11, 0x0, 0x800000080004105) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000040)={0x28, 0x3, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xffff}) (async) r12 = syz_open_dev$vcsu(&(0x7f0000000280), 0x4, 0x400000) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r12, 0x3b88, &(0x7f0000000340)={0xc, r13}) 18:05:10 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:10 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x541b, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:10 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:10 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r5, 0x0, 0x3}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r6, 0x101, 0x3, &(0x7f0000000100), 0x4) (async, rerun: 64) r7 = getpid() (rerun: 64) sched_setscheduler(r7, 0x1, &(0x7f0000000240)=0x1) (async) fcntl$setown(r6, 0x8, r7) (async) r8 = dup3(r0, r3, 0x0) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2}, 0x1c) (async) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r9, 0x0, 0x80000000}) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000140)={0x38, 0x1, r9, 0x0, 0x8, 0x6d68}) (rerun: 64) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000100)) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r10, r11, 0x0, 0x800000080004105) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r11, 0x3b85, &(0x7f0000000040)={0x28, 0x3, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xffff}) (async, rerun: 64) r12 = syz_open_dev$vcsu(&(0x7f0000000280), 0x4, 0x400000) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r12, 0x3b88, &(0x7f0000000340)={0xc, r13}) 18:05:10 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 693.778543][T18430] FAULT_INJECTION: forcing a failure. [ 693.778543][T18430] name failslab, interval 1, probability 0, space 0, times 0 [ 693.785281][T18430] CPU: 2 PID: 18430 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 693.790196][T18430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 693.794967][T18430] Call Trace: [ 693.796593][T18430] [ 693.798026][T18430] dump_stack_lvl+0x125/0x1b0 [ 693.800270][T18430] should_fail_ex+0x496/0x5b0 [ 693.802457][T18430] should_failslab+0x9/0x20 [ 693.804679][T18430] kmem_cache_alloc+0x61/0x400 [ 693.806980][T18430] alloc_empty_file+0x73/0x1d0 [ 693.809290][T18430] path_openat+0xdc/0x29c0 [ 693.811466][T18430] ? path_lookupat+0x770/0x770 [ 693.813776][T18430] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 693.816624][T18430] do_filp_open+0x1de/0x430 [ 693.818776][T18430] ? may_open_dev+0xf0/0xf0 [ 693.820937][T18430] ? find_held_lock+0x2d/0x110 [ 693.823260][T18430] ? _raw_spin_unlock+0x28/0x40 [ 693.825625][T18430] ? alloc_fd+0x2da/0x6c0 [ 693.827701][T18430] do_sys_openat2+0x176/0x1e0 [ 693.829962][T18430] ? build_open_flags+0x690/0x690 [ 693.832240][T18430] __x64_sys_open+0x154/0x1e0 [ 693.834527][T18430] ? do_sys_open+0x160/0x160 [ 693.836762][T18430] ? syscall_enter_from_user_mode+0x26/0x80 [ 693.839560][T18430] ? lockdep_hardirqs_on+0x7d/0x100 [ 693.842044][T18430] do_syscall_64+0x38/0xb0 [ 693.844159][T18430] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 693.846995][T18430] RIP: 0033:0x7f4ec1c7cae9 [ 693.849146][T18430] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 693.858175][T18430] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 693.862109][T18430] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 693.865836][T18430] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 693.869594][T18430] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 693.873401][T18430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.877138][T18430] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 693.880876][T18430] 18:05:11 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 7) 18:05:11 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:11 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffffff, 0xb3}) 18:05:11 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:11 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:11 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffffff, 0xb3}) 18:05:11 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:11 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffffff, 0xb3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffffff, 0xb3}) (async) [ 694.467933][T18450] FAULT_INJECTION: forcing a failure. [ 694.467933][T18450] name failslab, interval 1, probability 0, space 0, times 0 [ 694.473225][T18450] CPU: 1 PID: 18450 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 694.477136][T18450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 694.481570][T18450] Call Trace: [ 694.483144][T18450] [ 694.484489][T18450] dump_stack_lvl+0x125/0x1b0 [ 694.486504][T18450] should_fail_ex+0x496/0x5b0 [ 694.488748][T18450] should_failslab+0x9/0x20 [ 694.490585][T18450] __kmem_cache_alloc_node+0x5f/0x470 [ 694.492855][T18450] ? tomoyo_realpath_from_path+0xb9/0x710 [ 694.495007][T18450] __kmalloc+0x4f/0x100 [ 694.496580][T18450] tomoyo_realpath_from_path+0xb9/0x710 [ 694.498776][T18450] tomoyo_check_open_permission+0x2a3/0x3b0 [ 694.501196][T18450] ? tomoyo_path_number_perm+0x580/0x580 [ 694.503338][T18450] ? hook_path_mknod+0x670/0x670 [ 694.505173][T18450] ? spin_bug+0x1d0/0x1d0 [ 694.506779][T18450] tomoyo_file_open+0xa8/0xd0 [ 694.508507][T18450] security_file_open+0x6a/0xe0 [ 694.510307][T18450] do_dentry_open+0x538/0x1730 [ 694.512061][T18450] ? may_open+0x1f2/0x400 [ 694.513682][T18450] path_openat+0x19af/0x29c0 [ 694.515394][T18450] ? path_lookupat+0x770/0x770 [ 694.517376][T18450] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 694.520093][T18450] do_filp_open+0x1de/0x430 [ 694.522143][T18450] ? may_open_dev+0xf0/0xf0 [ 694.524222][T18450] ? find_held_lock+0x2d/0x110 [ 694.526392][T18450] ? _raw_spin_unlock+0x28/0x40 [ 694.528467][T18450] ? alloc_fd+0x2da/0x6c0 [ 694.530222][T18450] do_sys_openat2+0x176/0x1e0 [ 694.532038][T18450] ? build_open_flags+0x690/0x690 [ 694.534035][T18450] __x64_sys_open+0x154/0x1e0 [ 694.535838][T18450] ? do_sys_open+0x160/0x160 [ 694.537665][T18450] ? syscall_enter_from_user_mode+0x26/0x80 [ 694.539926][T18450] ? lockdep_hardirqs_on+0x7d/0x100 [ 694.541992][T18450] do_syscall_64+0x38/0xb0 [ 694.543759][T18450] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 694.546028][T18450] RIP: 0033:0x7f4ec1c7cae9 [ 694.547781][T18450] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 694.555148][T18450] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 694.558474][T18450] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 694.561375][T18450] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 694.564302][T18450] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 694.567467][T18450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.570474][T18450] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 694.573572][T18450] [ 694.576803][T18450] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:11 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 8) 18:05:11 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8933, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:11 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0x0, 0xb3}) 18:05:11 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:11 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0x0, 0xb3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0x0, 0xb3}) (async) 18:05:11 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:11 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0x0, 0xb3}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0x0, 0xb3}) 18:05:11 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 694.831794][T18467] overlayfs: failed to resolve './file1': -2 [ 695.236925][T18472] FAULT_INJECTION: forcing a failure. [ 695.236925][T18472] name failslab, interval 1, probability 0, space 0, times 0 [ 695.243647][T18472] CPU: 0 PID: 18472 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 695.248555][T18472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 695.253317][T18472] Call Trace: [ 695.254915][T18472] [ 695.256322][T18472] dump_stack_lvl+0x125/0x1b0 [ 695.258571][T18472] should_fail_ex+0x496/0x5b0 [ 695.260813][T18472] should_failslab+0x9/0x20 [ 695.263016][T18472] __kmem_cache_alloc_node+0x5f/0x470 [ 695.265600][T18472] ? tomoyo_realpath_from_path+0xb9/0x710 [ 695.268144][T18472] __kmalloc+0x4f/0x100 [ 695.269977][T18472] tomoyo_realpath_from_path+0xb9/0x710 [ 695.272664][T18472] tomoyo_check_open_permission+0x2a3/0x3b0 [ 695.275454][T18472] ? tomoyo_path_number_perm+0x580/0x580 [ 695.278173][T18472] ? hook_path_mknod+0x670/0x670 [ 695.280518][T18472] ? spin_bug+0x1d0/0x1d0 [ 695.282595][T18472] tomoyo_file_open+0xa8/0xd0 [ 695.284865][T18472] security_file_open+0x6a/0xe0 [ 695.287198][T18472] do_dentry_open+0x538/0x1730 [ 695.289411][T18472] ? may_open+0x1f2/0x400 [ 695.291406][T18472] path_openat+0x19af/0x29c0 [ 695.293660][T18472] ? path_lookupat+0x770/0x770 [ 695.296003][T18472] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 695.298912][T18472] do_filp_open+0x1de/0x430 [ 695.301010][T18472] ? may_open_dev+0xf0/0xf0 [ 695.303153][T18472] ? find_held_lock+0x2d/0x110 [ 695.305496][T18472] ? _raw_spin_unlock+0x28/0x40 [ 695.307582][T18472] ? alloc_fd+0x2da/0x6c0 [ 695.309561][T18472] do_sys_openat2+0x176/0x1e0 [ 695.311813][T18472] ? build_open_flags+0x690/0x690 [ 695.314256][T18472] __x64_sys_open+0x154/0x1e0 [ 695.316520][T18472] ? do_sys_open+0x160/0x160 [ 695.318695][T18472] ? syscall_enter_from_user_mode+0x26/0x80 [ 695.321518][T18472] ? lockdep_hardirqs_on+0x7d/0x100 [ 695.323964][T18472] do_syscall_64+0x38/0xb0 [ 695.326095][T18472] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 695.328899][T18472] RIP: 0033:0x7f4ec1c7cae9 [ 695.331039][T18472] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 695.340079][T18472] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 695.344025][T18472] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 695.347759][T18472] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 695.351482][T18472] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 695.355070][T18472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.358804][T18472] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 695.362514][T18472] [ 695.367857][T18472] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:12 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 9) 18:05:12 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:12 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448dd, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:12 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:12 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400454ca, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:12 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:12 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:12 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 695.628383][T18485] overlayfs: failed to resolve './file1': -2 [ 696.050805][T18493] FAULT_INJECTION: forcing a failure. [ 696.050805][T18493] name failslab, interval 1, probability 0, space 0, times 0 [ 696.057440][T18493] CPU: 2 PID: 18493 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 696.062261][T18493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 696.066939][T18493] Call Trace: [ 696.068595][T18493] [ 696.069997][T18493] dump_stack_lvl+0x125/0x1b0 [ 696.071620][T18493] should_fail_ex+0x496/0x5b0 [ 696.073487][T18493] should_failslab+0x9/0x20 [ 696.075527][T18493] __kmem_cache_alloc_node+0x5f/0x470 [ 696.077835][T18493] ? tomoyo_realpath_from_path+0xb9/0x710 [ 696.080356][T18493] __kmalloc+0x4f/0x100 [ 696.082208][T18493] tomoyo_realpath_from_path+0xb9/0x710 [ 696.084647][T18493] ? print_usage_bug.part.0+0x670/0x670 [ 696.087068][T18493] ? tomoyo_profile+0x47/0x60 [ 696.088834][T18493] tomoyo_path_perm+0x26f/0x450 [ 696.090857][T18493] ? tomoyo_path_perm+0x25b/0x450 [ 696.093198][T18493] ? tomoyo_check_open_permission+0x3b0/0x3b0 [ 696.095879][T18493] ? unwind_next_frame+0x51/0x2390 [ 696.098119][T18493] ? __orc_find+0x104/0x130 [ 696.099779][T18493] ? write_profile+0x450/0x450 [ 696.101526][T18493] ? print_usage_bug.part.0+0x670/0x670 [ 696.103550][T18493] ? stack_trace_save+0x96/0xd0 [ 696.105370][T18493] security_inode_getattr+0xf1/0x150 [ 696.107290][T18493] vfs_getattr+0x25/0x60 [ 696.108883][T18493] ovl_copy_up_one+0x153/0x2f10 [ 696.110746][T18493] ? print_usage_bug.part.0+0x670/0x670 [ 696.112771][T18493] ? print_usage_bug.part.0+0x670/0x670 [ 696.114777][T18493] ? ovl_copy_up_metadata+0x6c0/0x6c0 [ 696.117033][T18493] ? __lock_acquire+0x182f/0x5de0 [ 696.118906][T18493] ? do_raw_spin_unlock+0x173/0x230 [ 696.120866][T18493] ovl_copy_up_flags+0x189/0x200 [ 696.122668][T18493] ovl_maybe_copy_up+0x140/0x180 [ 696.124461][T18493] ovl_open+0x16f/0x330 [ 696.126217][T18493] ? ovl_llseek+0x380/0x380 [ 696.128301][T18493] do_dentry_open+0x88b/0x1730 [ 696.130066][T18493] ? ovl_llseek+0x380/0x380 [ 696.131700][T18493] ? may_open+0x1f2/0x400 [ 696.133271][T18493] path_openat+0x19af/0x29c0 [ 696.134960][T18493] ? path_lookupat+0x770/0x770 [ 696.136846][T18493] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 696.139107][T18493] do_filp_open+0x1de/0x430 [ 696.140786][T18493] ? may_open_dev+0xf0/0xf0 [ 696.142451][T18493] ? find_held_lock+0x2d/0x110 [ 696.144248][T18493] ? _raw_spin_unlock+0x28/0x40 [ 696.146096][T18493] ? alloc_fd+0x2da/0x6c0 [ 696.147706][T18493] do_sys_openat2+0x176/0x1e0 [ 696.149634][T18493] ? build_open_flags+0x690/0x690 [ 696.151848][T18493] __x64_sys_open+0x154/0x1e0 [ 696.154045][T18493] ? do_sys_open+0x160/0x160 [ 696.156344][T18493] ? syscall_enter_from_user_mode+0x26/0x80 [ 696.159093][T18493] ? lockdep_hardirqs_on+0x7d/0x100 [ 696.161252][T18493] do_syscall_64+0x38/0xb0 [ 696.162931][T18493] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 696.165733][T18493] RIP: 0033:0x7f4ec1c7cae9 [ 696.167805][T18493] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 696.175548][T18493] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 696.178649][T18493] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 696.181658][T18493] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 696.185175][T18493] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 696.188589][T18493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.192056][T18493] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 696.195577][T18493] [ 696.201939][T18493] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:13 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40086602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:13 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:13 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 10) 18:05:13 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) [ 696.327660][ T37] audit: type=1400 audit(1695578713.329:554): avc: denied { setattr } for pid=18494 comm="syz-executor.0" path="/dev/video3" dev="devtmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 18:05:13 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40087602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:13 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:13 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40186366, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:13 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r3 = dup(0xffffffffffffffff) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x18) r5 = getuid() r6 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRESDEC, @ANYRESHEX=r5], 0x1, 0x522, &(0x7f0000000a80)="$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") read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000340)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc, &(0x7f0000000380), 0x0, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r7}}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r9}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x24000014) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, r9}}, './file0\x00'}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r10, 0x3b86, &(0x7f00000000c0)={0x18, r11, 0xffffffffffffff54, 0xb3}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @loopback}}}, 0x84) 18:05:13 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x401c5820, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 696.396785][T18506] overlayfs: failed to resolve './file1': -2 18:05:13 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 696.736828][T18516] FAULT_INJECTION: forcing a failure. [ 696.736828][T18516] name failslab, interval 1, probability 0, space 0, times 0 [ 696.742558][T18516] CPU: 0 PID: 18516 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 696.747259][T18516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 696.751455][T18516] Call Trace: [ 696.752772][T18516] [ 696.753895][T18516] dump_stack_lvl+0x125/0x1b0 [ 696.755676][T18516] should_fail_ex+0x496/0x5b0 [ 696.757429][T18516] should_failslab+0x9/0x20 [ 696.759113][T18516] __kmem_cache_alloc_node+0x5f/0x470 [ 696.761136][T18516] ? tomoyo_realpath_from_path+0xb9/0x710 [ 696.763285][T18516] __kmalloc+0x4f/0x100 [ 696.764888][T18516] tomoyo_realpath_from_path+0xb9/0x710 [ 696.767260][T18516] ? print_usage_bug.part.0+0x670/0x670 [ 696.769777][T18516] ? tomoyo_profile+0x47/0x60 [ 696.771710][T18516] tomoyo_path_perm+0x26f/0x450 [ 696.773539][T18516] ? tomoyo_path_perm+0x25b/0x450 [ 696.775394][T18516] ? tomoyo_check_open_permission+0x3b0/0x3b0 [ 696.777623][T18516] ? unwind_next_frame+0x51/0x2390 [ 696.779604][T18516] ? __orc_find+0x104/0x130 [ 696.781503][T18516] ? write_profile+0x450/0x450 [ 696.783600][T18516] ? print_usage_bug.part.0+0x670/0x670 [ 696.786078][T18516] ? stack_trace_save+0x96/0xd0 [ 696.788243][T18516] security_inode_getattr+0xf1/0x150 [ 696.790581][T18516] vfs_getattr+0x25/0x60 [ 696.792500][T18516] ovl_copy_up_one+0x153/0x2f10 [ 696.794708][T18516] ? print_usage_bug.part.0+0x670/0x670 [ 696.797205][T18516] ? print_usage_bug.part.0+0x670/0x670 [ 696.799590][T18516] ? ovl_copy_up_metadata+0x6c0/0x6c0 [ 696.801991][T18516] ? __lock_acquire+0x182f/0x5de0 [ 696.804205][T18516] ? do_raw_spin_unlock+0x173/0x230 [ 696.806159][T18516] ovl_copy_up_flags+0x189/0x200 [ 696.808014][T18516] ovl_maybe_copy_up+0x140/0x180 [ 696.809858][T18516] ovl_open+0x16f/0x330 [ 696.811393][T18516] ? ovl_llseek+0x380/0x380 [ 696.813148][T18516] do_dentry_open+0x88b/0x1730 [ 696.814914][T18516] ? ovl_llseek+0x380/0x380 [ 696.816617][T18516] ? may_open+0x1f2/0x400 [ 696.818236][T18516] path_openat+0x19af/0x29c0 [ 696.819959][T18516] ? path_lookupat+0x770/0x770 [ 696.821780][T18516] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 696.824016][T18516] do_filp_open+0x1de/0x430 [ 696.825710][T18516] ? may_open_dev+0xf0/0xf0 [ 696.827385][T18516] ? find_held_lock+0x2d/0x110 [ 696.829168][T18516] ? _raw_spin_unlock+0x28/0x40 [ 696.830979][T18516] ? alloc_fd+0x2da/0x6c0 [ 696.832795][T18516] do_sys_openat2+0x176/0x1e0 [ 696.834970][T18516] ? build_open_flags+0x690/0x690 [ 696.837317][T18516] __x64_sys_open+0x154/0x1e0 [ 696.839483][T18516] ? do_sys_open+0x160/0x160 [ 696.841588][T18516] ? syscall_enter_from_user_mode+0x26/0x80 [ 696.844268][T18516] ? lockdep_hardirqs_on+0x7d/0x100 [ 696.846633][T18516] do_syscall_64+0x38/0xb0 [ 696.848620][T18516] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 696.851298][T18516] RIP: 0033:0x7f4ec1c7cae9 [ 696.853372][T18516] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 696.861979][T18516] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 696.865768][T18516] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 696.869217][T18516] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 696.872872][T18516] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 696.876400][T18516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 696.879991][T18516] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 696.883594][T18516] [ 696.888109][T18516] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:14 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 11) 18:05:14 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:14 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r3 = dup(0xffffffffffffffff) (async) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x18) (async) r5 = getuid() r6 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRESDEC, @ANYRESHEX=r5], 0x1, 0x522, &(0x7f0000000a80)="$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") (async) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000340)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc, &(0x7f0000000380), 0x0, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r7}}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r9}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x24000014) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, r9}}, './file0\x00'}) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r10, 0x3b86, &(0x7f00000000c0)={0x18, r11, 0xffffffffffffff54, 0xb3}) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @loopback}}}, 0x84) 18:05:14 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80086301, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:14 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80086601, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:14 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80087601, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:14 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r3 = dup(0xffffffffffffffff) (async) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x18) (async) r5 = getuid() r6 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRESDEC, @ANYRESHEX=r5], 0x1, 0x522, &(0x7f0000000a80)="$eJzs1b1u01AYBuCvaSiBqTNiOBILU1XYmAhCqVRhCQmUASYiNSwxQooXJ1MvgQvgwhi4CJSpW1BlF2jFWP+oeZ4ln/LaPuc9g/3p8ZfF2dfi849v32M03ovBOB4MLvbiMAZx5TwAgLvkYruNX9tK13sBANrh+w8Au+f9h49vXmXZ5F1Ko4jNeTktp9VvlZ+cZpPjdOngn7s2ZTnd/5M/S5Xr+b14WOfP/5sfxNMnVX6ZvX6b3cjvx1nj7QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLcdpTSMiJRSOvz776Ysp/tVfpSu3Mir6eQ0mxzXF1zPh/Fo2FoNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4BYUq/Vilufz5R0bIn5Gy4uO6iNtuem4XrYvJ9/k8LKJJ7+IiL4U7NHQ4UsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVLFaL2Z5Pl8WXe8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiLYrVezPJ8vmxw6LojAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0I3fAQAA///PCC46") (async) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000340)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc, &(0x7f0000000380), 0x0, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r7}}}, @rights={{0x20, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r9}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}, 0x24000014) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, r9}}, './file0\x00'}) (async) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r10, 0x3b86, &(0x7f00000000c0)={0x18, r11, 0xffffffffffffff54, 0xb3}) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @loopback}}}, 0x84) 18:05:14 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x801c581f, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:15 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:15 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:15 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 12) 18:05:15 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:15 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:15 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:15 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:15 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020660b, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:15 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285626, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:15 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285627, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 698.960546][T18565] FAULT_INJECTION: forcing a failure. [ 698.960546][T18565] name failslab, interval 1, probability 0, space 0, times 0 [ 698.966963][T18565] CPU: 3 PID: 18565 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 698.971508][T18565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 698.975418][T18565] Call Trace: [ 698.976868][T18565] [ 698.978159][T18565] dump_stack_lvl+0x125/0x1b0 [ 698.980284][T18565] should_fail_ex+0x496/0x5b0 [ 698.982395][T18565] should_failslab+0x9/0x20 [ 698.984259][T18565] kmem_cache_alloc+0x61/0x400 [ 698.986389][T18565] security_file_alloc+0x41/0x250 [ 698.988402][T18565] init_file+0xb9/0x2d0 [ 698.990361][T18565] alloc_empty_backing_file+0x63/0x100 [ 698.992769][T18565] backing_file_open+0x2d/0x1e0 [ 698.994782][T18565] ovl_open_realfile+0x28d/0x3b0 [ 698.997118][T18565] ovl_open+0x1d9/0x330 [ 698.998882][T18565] ? ovl_llseek+0x380/0x380 [ 699.000941][T18565] do_dentry_open+0x88b/0x1730 [ 699.003048][T18565] ? ovl_llseek+0x380/0x380 [ 699.005149][T18565] ? may_open+0x1f2/0x400 [ 699.006887][T18565] path_openat+0x19af/0x29c0 [ 699.008631][T18565] ? path_lookupat+0x770/0x770 [ 699.010596][T18565] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 699.013301][T18565] do_filp_open+0x1de/0x430 [ 699.015265][T18565] ? may_open_dev+0xf0/0xf0 [ 699.017510][T18565] ? find_held_lock+0x2d/0x110 [ 699.019624][T18565] ? _raw_spin_unlock+0x28/0x40 [ 699.021778][T18565] ? alloc_fd+0x2da/0x6c0 [ 699.023712][T18565] do_sys_openat2+0x176/0x1e0 [ 699.025628][T18565] ? build_open_flags+0x690/0x690 [ 699.027665][T18565] __x64_sys_open+0x154/0x1e0 [ 699.029530][T18565] ? do_sys_open+0x160/0x160 [ 699.031317][T18565] ? syscall_enter_from_user_mode+0x26/0x80 [ 699.033594][T18565] ? lockdep_hardirqs_on+0x7d/0x100 [ 699.035575][T18565] do_syscall_64+0x38/0xb0 [ 699.037298][T18565] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 699.039547][T18565] RIP: 0033:0x7f4ec1c7cae9 [ 699.041247][T18565] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 699.048744][T18565] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 699.051934][T18565] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 699.055010][T18565] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 699.058117][T18565] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 699.061243][T18565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 699.064219][T18565] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 699.067286][T18565] 18:05:16 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 13) 18:05:16 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:16 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:16 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:16 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405603, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:16 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405604, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:16 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405606, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:16 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405607, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 699.747179][T18588] FAULT_INJECTION: forcing a failure. [ 699.747179][T18588] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 699.753527][T18588] CPU: 3 PID: 18588 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 699.758387][T18588] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 699.763146][T18588] Call Trace: [ 699.764784][T18588] [ 699.766223][T18588] dump_stack_lvl+0x125/0x1b0 [ 699.768451][T18588] should_fail_ex+0x496/0x5b0 [ 699.770701][T18588] ? fs_reclaim_acquire+0xb0/0x150 [ 699.773150][T18588] __should_fail_alloc_page+0xe7/0x130 [ 699.775735][T18588] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 699.778709][T18588] ? prepare_alloc_pages.constprop.0+0x40c/0x550 [ 699.781753][T18588] __alloc_pages+0x14e/0x4a0 [ 699.783975][T18588] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 699.787215][T18588] ? mark_held_locks+0x9f/0xe0 [ 699.789532][T18588] cache_grow_begin+0x99/0x3a0 [ 699.791807][T18588] fallback_alloc+0x1d4/0x300 [ 699.794077][T18588] __kmem_cache_alloc_node+0x117/0x470 [ 699.796709][T18588] ? tomoyo_realpath_from_path+0xb9/0x710 [ 699.799408][T18588] __kmalloc+0x4f/0x100 [ 699.801386][T18588] tomoyo_realpath_from_path+0xb9/0x710 [ 699.803996][T18588] ? print_usage_bug.part.0+0x670/0x670 [ 699.806624][T18588] ? tomoyo_profile+0x47/0x60 [ 699.808878][T18588] tomoyo_path_perm+0x26f/0x450 [ 699.811206][T18588] ? tomoyo_path_perm+0x25b/0x450 [ 699.813617][T18588] ? tomoyo_check_open_permission+0x3b0/0x3b0 [ 699.815875][T18588] ? unwind_next_frame+0x51/0x2390 [ 699.818218][T18588] ? __orc_find+0x104/0x130 [ 699.820442][T18588] ? write_profile+0x450/0x450 [ 699.822753][T18588] ? print_usage_bug.part.0+0x670/0x670 [ 699.825395][T18588] ? stack_trace_save+0x96/0xd0 [ 699.827710][T18588] security_inode_getattr+0xf1/0x150 [ 699.830207][T18588] vfs_getattr+0x25/0x60 [ 699.832225][T18588] ovl_copy_up_one+0x153/0x2f10 [ 699.834464][T18588] ? print_usage_bug.part.0+0x670/0x670 [ 699.837116][T18588] ? print_usage_bug.part.0+0x670/0x670 [ 699.839732][T18588] ? ovl_copy_up_metadata+0x6c0/0x6c0 [ 699.842217][T18588] ? __lock_acquire+0x182f/0x5de0 [ 699.844583][T18588] ? do_raw_spin_unlock+0x173/0x230 [ 699.847071][T18588] ovl_copy_up_flags+0x189/0x200 [ 699.849476][T18588] ovl_maybe_copy_up+0x140/0x180 [ 699.851682][T18588] ovl_open+0x16f/0x330 [ 699.853648][T18588] ? ovl_llseek+0x380/0x380 [ 699.855830][T18588] do_dentry_open+0x88b/0x1730 [ 699.858104][T18588] ? ovl_llseek+0x380/0x380 [ 699.860279][T18588] ? may_open+0x1f2/0x400 [ 699.862364][T18588] path_openat+0x19af/0x29c0 [ 699.864544][T18588] ? path_lookupat+0x770/0x770 [ 699.866787][T18588] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 699.869564][T18588] do_filp_open+0x1de/0x430 [ 699.871489][T18588] ? may_open_dev+0xf0/0xf0 [ 699.873674][T18588] ? find_held_lock+0x2d/0x110 [ 699.875976][T18588] ? _raw_spin_unlock+0x28/0x40 [ 699.878313][T18588] ? alloc_fd+0x2da/0x6c0 [ 699.880375][T18588] do_sys_openat2+0x176/0x1e0 [ 699.882702][T18588] ? build_open_flags+0x690/0x690 [ 699.885148][T18588] __x64_sys_open+0x154/0x1e0 [ 699.887399][T18588] ? do_sys_open+0x160/0x160 [ 699.889614][T18588] ? syscall_enter_from_user_mode+0x26/0x80 [ 699.892301][T18588] ? lockdep_hardirqs_on+0x7d/0x100 [ 699.894761][T18588] do_syscall_64+0x38/0xb0 [ 699.896912][T18588] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 699.899722][T18588] RIP: 0033:0x7f4ec1c7cae9 [ 699.901865][T18588] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 699.910717][T18588] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 699.914686][T18588] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 699.918321][T18588] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 699.921983][T18588] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 699.925608][T18588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 699.929390][T18588] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 699.932895][T18588] [ 699.938772][T18588] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:17 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 14) 18:05:17 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0xc}) r6 = openat$incfs(r4, &(0x7f0000000180)='.log\x00', 0x204400, 0x8) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x38, 0x5, r2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$IOMMU_DESTROY$hwpt(r7, 0x3b80, &(0x7f0000000200)={0x8}) 18:05:17 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:17 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405609, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:17 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc040560b, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:17 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:17 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0xc}) r6 = openat$incfs(r4, &(0x7f0000000180)='.log\x00', 0x204400, 0x8) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x38, 0x5, r2}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$IOMMU_DESTROY$hwpt(r7, 0x3b80, &(0x7f0000000200)={0x8}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (async) sendfile(r3, r4, 0x0, 0x800000080004105) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0xc}) (async) openat$incfs(r4, &(0x7f0000000180)='.log\x00', 0x204400, 0x8) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x38, 0x5, r2}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async) ioctl$IOMMU_DESTROY$hwpt(r7, 0x3b80, &(0x7f0000000200)={0x8}) (async) 18:05:17 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405667, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 700.836854][T18609] FAULT_INJECTION: forcing a failure. [ 700.836854][T18609] name failslab, interval 1, probability 0, space 0, times 0 [ 700.842808][T18609] CPU: 0 PID: 18609 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 700.847750][T18609] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 700.852583][T18609] Call Trace: [ 700.854183][T18609] [ 700.855615][T18609] dump_stack_lvl+0x125/0x1b0 [ 700.857888][T18609] should_fail_ex+0x496/0x5b0 [ 700.860155][T18609] should_failslab+0x9/0x20 [ 700.862388][T18609] __kmem_cache_alloc_node+0x5f/0x470 [ 700.864972][T18609] ? tomoyo_encode2+0x100/0x3d0 [ 700.867309][T18609] __kmalloc+0x4f/0x100 [ 700.869309][T18609] tomoyo_encode2+0x100/0x3d0 [ 700.871577][T18609] ? rcu_is_watching+0x12/0xb0 [ 700.873884][T18609] tomoyo_encode+0x29/0x50 [ 700.876041][T18609] tomoyo_realpath_from_path+0x196/0x710 [ 700.878730][T18609] ? tomoyo_profile+0x47/0x60 [ 700.881036][T18609] tomoyo_path_perm+0x26f/0x450 [ 700.883393][T18609] ? tomoyo_path_perm+0x25b/0x450 [ 700.885844][T18609] ? tomoyo_check_open_permission+0x3b0/0x3b0 [ 700.888755][T18609] ? avc_has_perm+0x11b/0x1c0 [ 700.891023][T18609] ? make_vfsgid+0x108/0x160 [ 700.893307][T18609] ? from_vfsuid+0x170/0x170 [ 700.895542][T18609] ? ext4_getattr+0x335/0x770 [ 700.897773][T18609] security_inode_getattr+0xf1/0x150 [ 700.900306][T18609] vfs_getattr+0x25/0x60 [ 700.902369][T18609] ovl_copy_up_one+0x50d/0x2f10 [ 700.904715][T18609] ? print_usage_bug.part.0+0x670/0x670 [ 700.907338][T18609] ? print_usage_bug.part.0+0x670/0x670 [ 700.910003][T18609] ? ovl_copy_up_metadata+0x6c0/0x6c0 [ 700.912613][T18609] ? __lock_acquire+0x182f/0x5de0 [ 700.915024][T18609] ? do_raw_spin_unlock+0x173/0x230 [ 700.917517][T18609] ovl_copy_up_flags+0x189/0x200 [ 700.919892][T18609] ovl_maybe_copy_up+0x140/0x180 [ 700.922280][T18609] ovl_open+0x16f/0x330 [ 700.924112][T18609] ? ovl_llseek+0x380/0x380 [ 700.926244][T18609] do_dentry_open+0x88b/0x1730 [ 700.928449][T18609] ? ovl_llseek+0x380/0x380 [ 700.930522][T18609] ? may_open+0x1f2/0x400 [ 700.932535][T18609] path_openat+0x19af/0x29c0 [ 700.934772][T18609] ? path_lookupat+0x770/0x770 [ 700.937087][T18609] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 700.939914][T18609] do_filp_open+0x1de/0x430 [ 700.942087][T18609] ? may_open_dev+0xf0/0xf0 [ 700.944274][T18609] ? find_held_lock+0x2d/0x110 [ 700.946594][T18609] ? _raw_spin_unlock+0x28/0x40 [ 700.948936][T18609] ? alloc_fd+0x2da/0x6c0 [ 700.951007][T18609] do_sys_openat2+0x176/0x1e0 [ 700.953258][T18609] ? build_open_flags+0x690/0x690 [ 700.955629][T18609] __x64_sys_open+0x154/0x1e0 [ 700.957897][T18609] ? do_sys_open+0x160/0x160 [ 700.960112][T18609] ? syscall_enter_from_user_mode+0x26/0x80 [ 700.962942][T18609] ? lockdep_hardirqs_on+0x7d/0x100 [ 700.965450][T18609] do_syscall_64+0x38/0xb0 [ 700.967607][T18609] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 700.970431][T18609] RIP: 0033:0x7f4ec1c7cae9 [ 700.972577][T18609] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 700.981658][T18609] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 700.985590][T18609] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 700.989377][T18609] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 700.993168][T18609] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 700.996932][T18609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 701.000595][T18609] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 701.004330][T18609] [ 701.014495][T18609] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:18 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 15) 18:05:18 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:18 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000280)={0xc}) r6 = openat$incfs(r4, &(0x7f0000000180)='.log\x00', 0x204400, 0x8) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x38, 0x5, r2}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$IOMMU_DESTROY$hwpt(r7, 0x3b80, &(0x7f0000000200)={0x8}) 18:05:18 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:18 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:18 executing program 3: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0xffffffffffffff54, 0xb3}) 18:05:18 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:18 executing program 2: write$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) [ 701.501233][T18630] FAULT_INJECTION: forcing a failure. [ 701.501233][T18630] name failslab, interval 1, probability 0, space 0, times 0 [ 701.508981][T18630] CPU: 2 PID: 18630 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 701.513844][T18630] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 701.518489][T18630] Call Trace: [ 701.520062][T18630] [ 701.521439][T18630] dump_stack_lvl+0x125/0x1b0 [ 701.523632][T18630] should_fail_ex+0x496/0x5b0 [ 701.525849][T18630] should_failslab+0x9/0x20 [ 701.527974][T18630] __kmem_cache_alloc_node+0x5f/0x470 [ 701.530482][T18630] ? tomoyo_realpath_from_path+0xb9/0x710 [ 701.533172][T18630] __kmalloc+0x4f/0x100 [ 701.535127][T18630] tomoyo_realpath_from_path+0xb9/0x710 [ 701.537737][T18630] ? tomoyo_profile+0x47/0x60 [ 701.539963][T18630] tomoyo_path_perm+0x26f/0x450 [ 701.542145][T18630] ? tomoyo_path_perm+0x25b/0x450 [ 701.544531][T18630] ? tomoyo_check_open_permission+0x3b0/0x3b0 [ 701.547153][T18630] ? avc_has_perm+0x11b/0x1c0 [ 701.549097][T18630] ? make_vfsgid+0x108/0x160 [ 701.551194][T18630] ? from_vfsuid+0x170/0x170 [ 701.553380][T18630] ? ext4_getattr+0x335/0x770 [ 701.555577][T18630] security_inode_getattr+0xf1/0x150 [ 701.557973][T18630] vfs_getattr+0x25/0x60 [ 701.559978][T18630] ovl_copy_up_one+0x50d/0x2f10 [ 701.562284][T18630] ? print_usage_bug.part.0+0x670/0x670 [ 701.564886][T18630] ? print_usage_bug.part.0+0x670/0x670 [ 701.567475][T18630] ? ovl_copy_up_metadata+0x6c0/0x6c0 [ 701.570010][T18630] ? __lock_acquire+0x182f/0x5de0 [ 701.572363][T18630] ? do_raw_spin_unlock+0x173/0x230 [ 701.574792][T18630] ovl_copy_up_flags+0x189/0x200 [ 701.577032][T18630] ovl_maybe_copy_up+0x140/0x180 [ 701.579263][T18630] ovl_open+0x16f/0x330 [ 701.581233][T18630] ? ovl_llseek+0x380/0x380 [ 701.583387][T18630] do_dentry_open+0x88b/0x1730 [ 701.585635][T18630] ? ovl_llseek+0x380/0x380 [ 701.587801][T18630] ? may_open+0x1f2/0x400 [ 701.589877][T18630] path_openat+0x19af/0x29c0 [ 701.592059][T18630] ? path_lookupat+0x770/0x770 [ 701.594370][T18630] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 701.597174][T18630] do_filp_open+0x1de/0x430 [ 701.599283][T18630] ? may_open_dev+0xf0/0xf0 [ 701.601471][T18630] ? find_held_lock+0x2d/0x110 [ 701.603723][T18630] ? _raw_spin_unlock+0x28/0x40 [ 701.606013][T18630] ? alloc_fd+0x2da/0x6c0 [ 701.607959][T18630] do_sys_openat2+0x176/0x1e0 [ 701.610146][T18630] ? build_open_flags+0x690/0x690 [ 701.612448][T18630] __x64_sys_open+0x154/0x1e0 [ 701.614647][T18630] ? do_sys_open+0x160/0x160 [ 701.616854][T18630] ? syscall_enter_from_user_mode+0x26/0x80 [ 701.619590][T18630] ? lockdep_hardirqs_on+0x7d/0x100 [ 701.622070][T18630] do_syscall_64+0x38/0xb0 [ 701.624242][T18630] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 701.627067][T18630] RIP: 0033:0x7f4ec1c7cae9 [ 701.629221][T18630] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 701.638181][T18630] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 701.642069][T18630] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 701.645734][T18630] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 701.649194][T18630] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 701.652924][T18630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 701.656657][T18630] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 701.660330][T18630] [ 701.666436][T18630] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:18 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 16) 18:05:18 executing program 3: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') (rerun: 64) sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0xffffffffffffff54, 0xb3}) 18:05:18 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:18 executing program 2: write$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:18 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x2, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:18 executing program 2: write$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:18 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x3, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:18 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x4, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 702.174146][T18649] FAULT_INJECTION: forcing a failure. [ 702.174146][T18649] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 702.179992][T18649] CPU: 3 PID: 18649 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 702.184616][T18649] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 702.188974][T18649] Call Trace: [ 702.190386][T18649] [ 702.191769][T18649] dump_stack_lvl+0x125/0x1b0 [ 702.193995][T18649] should_fail_ex+0x496/0x5b0 [ 702.196128][T18649] ? fs_reclaim_acquire+0xb0/0x150 [ 702.198498][T18649] __should_fail_alloc_page+0xe7/0x130 [ 702.201225][T18649] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 702.204019][T18649] ? prepare_alloc_pages.constprop.0+0x40c/0x550 [ 702.206879][T18649] __alloc_pages+0x14e/0x4a0 [ 702.208969][T18649] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 702.211772][T18649] ? mark_held_locks+0x9f/0xe0 [ 702.213960][T18649] cache_grow_begin+0x99/0x3a0 [ 702.216118][T18649] fallback_alloc+0x1d4/0x300 [ 702.218279][T18649] __kmem_cache_alloc_node+0x117/0x470 [ 702.220888][T18649] ? tomoyo_realpath_from_path+0xb9/0x710 [ 702.223494][T18649] __kmalloc+0x4f/0x100 [ 702.225478][T18649] tomoyo_realpath_from_path+0xb9/0x710 [ 702.228139][T18649] ? print_usage_bug.part.0+0x670/0x670 [ 702.230597][T18649] ? tomoyo_profile+0x47/0x60 [ 702.232698][T18649] tomoyo_path_perm+0x26f/0x450 [ 702.234949][T18649] ? tomoyo_path_perm+0x25b/0x450 [ 702.237394][T18649] ? tomoyo_check_open_permission+0x3b0/0x3b0 [ 702.240319][T18649] ? unwind_next_frame+0x51/0x2390 [ 702.242805][T18649] ? __orc_find+0x104/0x130 [ 702.244997][T18649] ? write_profile+0x450/0x450 [ 702.247351][T18649] ? print_usage_bug.part.0+0x670/0x670 [ 702.249989][T18649] ? stack_trace_save+0x96/0xd0 [ 702.252369][T18649] security_inode_getattr+0xf1/0x150 [ 702.254909][T18649] vfs_getattr+0x25/0x60 [ 702.256960][T18649] ovl_copy_up_one+0x153/0x2f10 [ 702.259318][T18649] ? print_usage_bug.part.0+0x670/0x670 [ 702.261970][T18649] ? print_usage_bug.part.0+0x670/0x670 [ 702.264622][T18649] ? ovl_copy_up_metadata+0x6c0/0x6c0 [ 702.267196][T18649] ? __lock_acquire+0x182f/0x5de0 [ 702.269648][T18649] ? do_raw_spin_unlock+0x173/0x230 [ 702.272156][T18649] ovl_copy_up_flags+0x189/0x200 [ 702.274583][T18649] ovl_maybe_copy_up+0x140/0x180 [ 702.276992][T18649] ovl_open+0x16f/0x330 [ 702.279005][T18649] ? ovl_llseek+0x380/0x380 [ 702.281194][T18649] do_dentry_open+0x88b/0x1730 [ 702.283492][T18649] ? ovl_llseek+0x380/0x380 [ 702.285687][T18649] ? may_open+0x1f2/0x400 [ 702.287776][T18649] path_openat+0x19af/0x29c0 [ 702.290008][T18649] ? path_lookupat+0x770/0x770 [ 702.292335][T18649] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 702.295206][T18649] do_filp_open+0x1de/0x430 [ 702.297429][T18649] ? may_open_dev+0xf0/0xf0 [ 702.299599][T18649] ? find_held_lock+0x2d/0x110 [ 702.301912][T18649] ? _raw_spin_unlock+0x28/0x40 [ 702.304237][T18649] ? alloc_fd+0x2da/0x6c0 [ 702.306325][T18649] do_sys_openat2+0x176/0x1e0 [ 702.308608][T18649] ? build_open_flags+0x690/0x690 [ 702.311028][T18649] __x64_sys_open+0x154/0x1e0 [ 702.313310][T18649] ? do_sys_open+0x160/0x160 [ 702.315529][T18649] ? syscall_enter_from_user_mode+0x26/0x80 [ 702.318374][T18649] ? lockdep_hardirqs_on+0x7d/0x100 [ 702.320889][T18649] do_syscall_64+0x38/0xb0 [ 702.323048][T18649] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 702.325882][T18649] RIP: 0033:0x7f4ec1c7cae9 [ 702.327995][T18649] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 702.337124][T18649] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 702.341089][T18649] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 702.344662][T18649] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 702.348417][T18649] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 702.352161][T18649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 702.355958][T18649] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 702.359708][T18649] [ 702.364191][T18649] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:19 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 17) 18:05:19 executing program 3: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') sendfile(r1, r2, 0x0, 0x800000080004105) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0xffffffffffffff54, 0xb3}) 18:05:19 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x5, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:19 executing program 2: r0 = creat(0x0, 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:19 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x7, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:19 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) r4 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) 18:05:19 executing program 2: r0 = creat(0x0, 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:19 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x9, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:20 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 18) 18:05:20 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) (async) r4 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) 18:05:20 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0xb, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:20 executing program 2: r0 = creat(0x0, 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:20 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:20 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0xffd, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:20 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) (async) r4 = syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) 18:05:20 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x2, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:20 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x3, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:20 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:20 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 19) 18:05:20 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:21 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x4, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:21 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:21 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x5, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:21 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:21 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 704.423021][T18709] FAULT_INJECTION: forcing a failure. [ 704.423021][T18709] name failslab, interval 1, probability 0, space 0, times 0 [ 704.433162][T18709] CPU: 2 PID: 18709 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 704.437970][T18709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 704.442219][T18709] Call Trace: [ 704.443782][T18709] [ 704.445203][T18709] dump_stack_lvl+0x125/0x1b0 [ 704.447438][T18709] should_fail_ex+0x496/0x5b0 [ 704.449671][T18709] should_failslab+0x9/0x20 [ 704.451830][T18709] __kmem_cache_alloc_node+0x5f/0x470 [ 704.454363][T18709] ? tomoyo_encode2+0x100/0x3d0 [ 704.456672][T18709] __kmalloc+0x4f/0x100 [ 704.458673][T18709] tomoyo_encode2+0x100/0x3d0 [ 704.460902][T18709] ? rcu_is_watching+0x12/0xb0 [ 704.463237][T18709] tomoyo_encode+0x29/0x50 [ 704.465429][T18709] tomoyo_realpath_from_path+0x196/0x710 [ 704.468106][T18709] ? tomoyo_profile+0x47/0x60 [ 704.470334][T18709] tomoyo_path_perm+0x26f/0x450 [ 704.472662][T18709] ? tomoyo_path_perm+0x25b/0x450 [ 704.474881][T18709] ? tomoyo_check_open_permission+0x3b0/0x3b0 [ 704.477640][T18709] ? avc_has_perm+0x11b/0x1c0 [ 704.479811][T18709] ? make_vfsgid+0x108/0x160 [ 704.481895][T18709] ? from_vfsuid+0x170/0x170 [ 704.483994][T18709] ? ext4_getattr+0x335/0x770 [ 704.486077][T18709] security_inode_getattr+0xf1/0x150 [ 704.488476][T18709] vfs_getattr+0x25/0x60 [ 704.490414][T18709] ovl_copy_up_one+0x50d/0x2f10 [ 704.492618][T18709] ? print_usage_bug.part.0+0x670/0x670 [ 704.494947][T18709] ? print_usage_bug.part.0+0x670/0x670 [ 704.497518][T18709] ? ovl_copy_up_metadata+0x6c0/0x6c0 [ 704.500023][T18709] ? __lock_acquire+0x182f/0x5de0 [ 704.502427][T18709] ? do_raw_spin_unlock+0x173/0x230 [ 704.504891][T18709] ovl_copy_up_flags+0x189/0x200 [ 704.507249][T18709] ovl_maybe_copy_up+0x140/0x180 [ 704.509564][T18709] ovl_open+0x16f/0x330 [ 704.511536][T18709] ? ovl_llseek+0x380/0x380 [ 704.513669][T18709] do_dentry_open+0x88b/0x1730 [ 704.515585][T18709] ? ovl_llseek+0x380/0x380 [ 704.517751][T18709] ? may_open+0x1f2/0x400 [ 704.519789][T18709] path_openat+0x19af/0x29c0 [ 704.521967][T18709] ? path_lookupat+0x770/0x770 [ 704.524154][T18709] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 704.526943][T18709] do_filp_open+0x1de/0x430 [ 704.529081][T18709] ? may_open_dev+0xf0/0xf0 [ 704.530980][T18709] ? find_held_lock+0x2d/0x110 [ 704.533120][T18709] ? _raw_spin_unlock+0x28/0x40 [ 704.535382][T18709] ? alloc_fd+0x2da/0x6c0 [ 704.537438][T18709] do_sys_openat2+0x176/0x1e0 [ 704.539607][T18709] ? build_open_flags+0x690/0x690 [ 704.541942][T18709] __x64_sys_open+0x154/0x1e0 [ 704.544115][T18709] ? do_sys_open+0x160/0x160 [ 704.546311][T18709] ? syscall_enter_from_user_mode+0x26/0x80 [ 704.549059][T18709] ? lockdep_hardirqs_on+0x7d/0x100 [ 704.551471][T18709] do_syscall_64+0x38/0xb0 [ 704.553553][T18709] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 704.556304][T18709] RIP: 0033:0x7f4ec1c7cae9 [ 704.558382][T18709] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 704.567198][T18709] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 704.571046][T18709] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 704.574749][T18709] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 704.578352][T18709] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 704.582027][T18709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 704.585701][T18709] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 704.589370][T18709] [ 704.593321][T18709] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:21 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0x3}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r5, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x1, r3, 0x0, &(0x7f0000000100)="6c0186fb6bdd69426f9ca56be3030870a7c06f74861b3a057740a64a2684044c319d1c5846b1de1893f9d1becfc8e1d4b48ef0684bba1047b6f9e0d2ecf7581ee145c3ebe4b8cab7f0170afcbf8270d558a63cf7f53643a7e83bf1b78019b9bedb76b3c7dc6691dff53331f4440b7fadb7a0da1408904612e53e6b126a01b099ee592f3dcca822f0639aad94067efaceb58dc3962a1d237277392a340562e84d58ade5581f89", 0xa6, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:21 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:21 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 20) 18:05:21 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x6, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:21 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x7, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 704.742866][T18715] iommufd_mock iommufd_mock1: Adding to iommu group 9 18:05:21 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:21 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0x3}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r5, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r3}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x1, r3, 0x0, &(0x7f0000000100)="6c0186fb6bdd69426f9ca56be3030870a7c06f74861b3a057740a64a2684044c319d1c5846b1de1893f9d1becfc8e1d4b48ef0684bba1047b6f9e0d2ecf7581ee145c3ebe4b8cab7f0170afcbf8270d558a63cf7f53643a7e83bf1b78019b9bedb76b3c7dc6691dff53331f4440b7fadb7a0da1408904612e53e6b126a01b099ee592f3dcca822f0639aad94067efaceb58dc3962a1d237277392a340562e84d58ade5581f89", 0xa6, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc}) (async) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0x3}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r5, 0x0, 0x80000000}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r3}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x1, r3, 0x0, &(0x7f0000000100)="6c0186fb6bdd69426f9ca56be3030870a7c06f74861b3a057740a64a2684044c319d1c5846b1de1893f9d1becfc8e1d4b48ef0684bba1047b6f9e0d2ecf7581ee145c3ebe4b8cab7f0170afcbf8270d558a63cf7f53643a7e83bf1b78019b9bedb76b3c7dc6691dff53331f4440b7fadb7a0da1408904612e53e6b126a01b099ee592f3dcca822f0639aad94067efaceb58dc3962a1d237277392a340562e84d58ade5581f89", 0xa6, 0xffffffffffffffff}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) 18:05:21 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x8, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 704.791623][T18721] iommufd_mock iommufd_mock1: Adding to iommu group 9 18:05:21 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x9, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:21 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0x3}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r5, 0x0, 0x80000000}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r3}) (async) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x1, r3, 0x0, &(0x7f0000000100)="6c0186fb6bdd69426f9ca56be3030870a7c06f74861b3a057740a64a2684044c319d1c5846b1de1893f9d1becfc8e1d4b48ef0684bba1047b6f9e0d2ecf7581ee145c3ebe4b8cab7f0170afcbf8270d558a63cf7f53643a7e83bf1b78019b9bedb76b3c7dc6691dff53331f4440b7fadb7a0da1408904612e53e6b126a01b099ee592f3dcca822f0639aad94067efaceb58dc3962a1d237277392a340562e84d58ade5581f89", 0xa6, 0xffffffffffffffff}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 705.361663][T18737] FAULT_INJECTION: forcing a failure. [ 705.361663][T18737] name failslab, interval 1, probability 0, space 0, times 0 [ 705.366786][T18737] CPU: 2 PID: 18737 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 705.371533][T18737] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 705.376105][T18737] Call Trace: [ 705.377659][T18737] [ 705.379003][T18737] dump_stack_lvl+0x125/0x1b0 [ 705.381171][T18737] should_fail_ex+0x496/0x5b0 [ 705.383166][T18737] should_failslab+0x9/0x20 [ 705.384894][T18737] __kmem_cache_alloc_node+0x5f/0x470 [ 705.386862][T18737] kmalloc_trace+0x25/0xe0 [ 705.388533][T18737] alloc_empty_backing_file+0x49/0x100 [ 705.390580][T18737] backing_file_open+0x2d/0x1e0 [ 705.392440][T18737] ovl_open_realfile+0x28d/0x3b0 [ 705.394424][T18737] ovl_open+0x1d9/0x330 [ 705.396003][T18737] ? ovl_llseek+0x380/0x380 [ 705.397726][T18737] do_dentry_open+0x88b/0x1730 [ 705.399823][T18737] ? ovl_llseek+0x380/0x380 [ 705.401525][T18737] ? may_open+0x1f2/0x400 [ 705.403169][T18737] path_openat+0x19af/0x29c0 [ 705.404909][T18737] ? path_lookupat+0x770/0x770 [ 705.406723][T18737] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 705.408970][T18737] do_filp_open+0x1de/0x430 [ 705.410648][T18737] ? may_open_dev+0xf0/0xf0 [ 705.412380][T18737] ? find_held_lock+0x2d/0x110 [ 705.414193][T18737] ? _raw_spin_unlock+0x28/0x40 [ 705.416012][T18737] ? alloc_fd+0x2da/0x6c0 [ 705.417658][T18737] do_sys_openat2+0x176/0x1e0 [ 705.419410][T18737] ? build_open_flags+0x690/0x690 [ 705.421335][T18737] __x64_sys_open+0x154/0x1e0 [ 705.423087][T18737] ? do_sys_open+0x160/0x160 [ 705.424845][T18737] ? syscall_enter_from_user_mode+0x26/0x80 [ 705.427060][T18737] ? lockdep_hardirqs_on+0x7d/0x100 [ 705.429054][T18737] do_syscall_64+0x38/0xb0 [ 705.430803][T18737] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 705.433078][T18737] RIP: 0033:0x7f4ec1c7cae9 [ 705.434745][T18737] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 705.441931][T18737] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 705.445090][T18737] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 705.448338][T18737] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 705.451313][T18737] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 705.454286][T18737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 705.457301][T18737] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 705.460455][T18737] 18:05:22 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 21) 18:05:22 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:22 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000240), 0x5c) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0xfffffcdb, r2}, './file0/file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000200)={0x8}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000180)={0x18, r1, 0xfeffffffffffff54, 0x2}) 18:05:22 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0xa, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:22 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) (async) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000240), 0x5c) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0xfffffcdb, r2}, './file0/file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000200)={0x8}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000180)={0x18, r1, 0xfeffffffffffff54, 0x2}) 18:05:22 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0xb, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:22 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:22 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000240), 0x5c) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0xfffffcdb, r2}, './file0/file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r3, 0x3b80, &(0x7f0000000200)={0x8}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000180)={0x18, r1, 0xfeffffffffffff54, 0x2}) (async) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000180)={0x18, r1, 0xfeffffffffffff54, 0x2}) [ 706.178003][T18760] FAULT_INJECTION: forcing a failure. [ 706.178003][T18760] name failslab, interval 1, probability 0, space 0, times 0 [ 706.182983][T18760] CPU: 0 PID: 18760 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 706.187290][T18760] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 706.191543][T18760] Call Trace: [ 706.193192][T18760] [ 706.194612][T18760] dump_stack_lvl+0x125/0x1b0 [ 706.196627][T18760] should_fail_ex+0x496/0x5b0 [ 706.198898][T18760] should_failslab+0x9/0x20 [ 706.201111][T18760] kmem_cache_alloc+0x61/0x400 [ 706.203384][T18760] security_file_alloc+0x41/0x250 [ 706.205787][T18760] init_file+0xb9/0x2d0 [ 706.207782][T18760] alloc_empty_backing_file+0x63/0x100 [ 706.210364][T18760] backing_file_open+0x2d/0x1e0 [ 706.212714][T18760] ovl_open_realfile+0x28d/0x3b0 [ 706.215078][T18760] ovl_open+0x1d9/0x330 [ 706.217115][T18760] ? ovl_llseek+0x380/0x380 [ 706.219285][T18760] do_dentry_open+0x88b/0x1730 [ 706.221597][T18760] ? ovl_llseek+0x380/0x380 [ 706.223798][T18760] ? may_open+0x1f2/0x400 [ 706.225881][T18760] path_openat+0x19af/0x29c0 [ 706.228147][T18760] ? path_lookupat+0x770/0x770 [ 706.230404][T18760] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 706.233242][T18760] do_filp_open+0x1de/0x430 [ 706.235380][T18760] ? may_open_dev+0xf0/0xf0 [ 706.237503][T18760] ? find_held_lock+0x2d/0x110 [ 706.239802][T18760] ? _raw_spin_unlock+0x28/0x40 [ 706.242154][T18760] ? alloc_fd+0x2da/0x6c0 [ 706.244221][T18760] do_sys_openat2+0x176/0x1e0 [ 706.246500][T18760] ? build_open_flags+0x690/0x690 [ 706.248901][T18760] __x64_sys_open+0x154/0x1e0 [ 706.251518][T18760] ? do_sys_open+0x160/0x160 [ 706.253956][T18760] ? syscall_enter_from_user_mode+0x26/0x80 [ 706.256712][T18760] ? lockdep_hardirqs_on+0x7d/0x100 [ 706.259179][T18760] do_syscall_64+0x38/0xb0 [ 706.261322][T18760] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 706.264147][T18760] RIP: 0033:0x7f4ec1c7cae9 [ 706.265895][T18760] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 706.273704][T18760] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 706.276741][T18760] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 706.279715][T18760] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 706.282604][T18760] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 706.285496][T18760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 706.288437][T18760] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 706.291193][T18760] 18:05:23 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 22) 18:05:23 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0xc, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:23 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) 18:05:23 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:23 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0xd, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:23 executing program 3: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) 18:05:23 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0xe, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:23 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) [ 707.099017][T18783] FAULT_INJECTION: forcing a failure. [ 707.099017][T18783] name failslab, interval 1, probability 0, space 0, times 0 [ 707.105542][T18783] CPU: 2 PID: 18783 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 707.109422][T18783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 707.113100][T18783] Call Trace: [ 707.114323][T18783] [ 707.115412][T18783] dump_stack_lvl+0x125/0x1b0 [ 707.117333][T18783] should_fail_ex+0x496/0x5b0 [ 707.119573][T18783] should_failslab+0x9/0x20 [ 707.121638][T18783] __kmem_cache_alloc_node+0x5f/0x470 [ 707.123602][T18783] ? tomoyo_encode2+0x100/0x3d0 [ 707.125393][T18783] __kmalloc+0x4f/0x100 [ 707.127018][T18783] tomoyo_encode2+0x100/0x3d0 [ 707.128761][T18783] ? rcu_is_watching+0x12/0xb0 [ 707.130609][T18783] tomoyo_encode+0x29/0x50 [ 707.132261][T18783] tomoyo_realpath_from_path+0x196/0x710 [ 707.134302][T18783] tomoyo_check_open_permission+0x2a3/0x3b0 [ 707.136474][T18783] ? tomoyo_path_number_perm+0x580/0x580 [ 707.138989][T18783] ? hook_path_mknod+0x670/0x670 [ 707.141162][T18783] ? spin_bug+0x1d0/0x1d0 [ 707.143082][T18783] tomoyo_file_open+0xa8/0xd0 [ 707.145476][T18783] security_file_open+0x6a/0xe0 [ 707.147590][T18783] do_dentry_open+0x538/0x1730 [ 707.149433][T18783] ? do_raw_spin_unlock+0x173/0x230 [ 707.151399][T18783] backing_file_open+0x14a/0x1e0 [ 707.153269][T18783] ovl_open_realfile+0x28d/0x3b0 [ 707.155145][T18783] ovl_open+0x1d9/0x330 [ 707.156815][T18783] ? ovl_llseek+0x380/0x380 [ 707.158902][T18783] do_dentry_open+0x88b/0x1730 [ 707.161141][T18783] ? ovl_llseek+0x380/0x380 [ 707.163274][T18783] ? may_open+0x1f2/0x400 [ 707.165300][T18783] path_openat+0x19af/0x29c0 [ 707.167475][T18783] ? path_lookupat+0x770/0x770 [ 707.169744][T18783] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 707.172578][T18783] do_filp_open+0x1de/0x430 [ 707.174735][T18783] ? may_open_dev+0xf0/0xf0 [ 707.176900][T18783] ? find_held_lock+0x2d/0x110 [ 707.179170][T18783] ? _raw_spin_unlock+0x28/0x40 [ 707.181457][T18783] ? alloc_fd+0x2da/0x6c0 [ 707.183232][T18783] do_sys_openat2+0x176/0x1e0 [ 707.184968][T18783] ? build_open_flags+0x690/0x690 [ 707.186843][T18783] __x64_sys_open+0x154/0x1e0 [ 707.188575][T18783] ? do_sys_open+0x160/0x160 [ 707.190274][T18783] ? syscall_enter_from_user_mode+0x26/0x80 [ 707.192449][T18783] ? lockdep_hardirqs_on+0x7d/0x100 [ 707.194426][T18783] do_syscall_64+0x38/0xb0 [ 707.196051][T18783] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 707.198782][T18783] RIP: 0033:0x7f4ec1c7cae9 [ 707.200553][T18783] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 707.208866][T18783] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 707.212794][T18783] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 707.216463][T18783] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 707.220108][T18783] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 707.223938][T18783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 707.227567][T18783] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 707.230983][T18783] [ 707.233903][T18783] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:24 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x300, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:24 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r4, 0x0, 0x800000080004105) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r6, 0x0, 0x3}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat2(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x80000, 0x140, 0xc}, 0x18) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r10, 0x0, 0x3}) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r12, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r10}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000280)={0x38, 0x5, r10}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x208}, {0xffffffffffffffff, 0xc000}, {0xffffffffffffffff, 0x6200}, {r8, 0x5308}, {0xffffffffffffffff, 0x2000}], 0x5, &(0x7f0000000380), &(0x7f00000003c0)={[0x8]}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r13, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r6}) r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r15, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r15, 0xffffffffffffff50, 0xb3}) 18:05:24 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 23) 18:05:24 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:24 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 707.325833][T18789] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 707.334400][T18789] iommufd_mock iommufd_mock2: Adding to iommu group 10 18:05:24 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x2, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:24 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r4, 0x0, 0x800000080004105) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r6, 0x0, 0x3}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r8 = openat2(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x80000, 0x140, 0xc}, 0x18) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r10, 0x0, 0x3}) (async) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r12, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r10}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000280)={0x38, 0x5, r10}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x208}, {0xffffffffffffffff, 0xc000}, {0xffffffffffffffff, 0x6200}, {r8, 0x5308}, {0xffffffffffffffff, 0x2000}], 0x5, &(0x7f0000000380), &(0x7f00000003c0)={[0x8]}, 0x8) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r13, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r6}) (async) r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r15, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r15, 0xffffffffffffff50, 0xb3}) 18:05:24 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x3, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:24 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r4, 0x0, 0x800000080004105) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r6, 0x0, 0x3}) (async, rerun: 32) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r8 = openat2(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x80000, 0x140, 0xc}, 0x18) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r10, 0x0, 0x3}) (async) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r9, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r12, 0x0, 0x80000000}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r10}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000280)={0x38, 0x5, r10}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x208}, {0xffffffffffffffff, 0xc000}, {0xffffffffffffffff, 0x6200}, {r8, 0x5308}, {0xffffffffffffffff, 0x2000}], 0x5, &(0x7f0000000380), &(0x7f00000003c0)={[0x8]}, 0x8) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r13, 0x0, 0x80000000}) (rerun: 32) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r6}) (async) r14 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r14, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r15, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r15, 0xffffffffffffff50, 0xb3}) 18:05:24 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x4, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 708.068263][T18816] FAULT_INJECTION: forcing a failure. [ 708.068263][T18816] name failslab, interval 1, probability 0, space 0, times 0 [ 708.073679][T18816] CPU: 0 PID: 18816 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 708.077698][T18816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 708.082188][T18816] Call Trace: [ 708.083719][T18816] [ 708.084873][T18816] dump_stack_lvl+0x125/0x1b0 [ 708.086845][T18816] should_fail_ex+0x496/0x5b0 [ 708.088700][T18816] should_failslab+0x9/0x20 [ 708.090817][T18816] __kmem_cache_alloc_node+0x5f/0x470 [ 708.093059][T18816] kmalloc_trace+0x25/0xe0 [ 708.094812][T18816] alloc_empty_backing_file+0x49/0x100 [ 708.096957][T18816] backing_file_open+0x2d/0x1e0 [ 708.099048][T18816] ovl_open_realfile+0x28d/0x3b0 [ 708.101279][T18816] ovl_open+0x1d9/0x330 [ 708.103156][T18816] ? ovl_llseek+0x380/0x380 [ 708.105194][T18816] do_dentry_open+0x88b/0x1730 [ 708.107273][T18816] ? ovl_llseek+0x380/0x380 [ 708.109357][T18816] ? may_open+0x1f2/0x400 [ 708.111422][T18816] path_openat+0x19af/0x29c0 [ 708.113285][T18816] ? path_lookupat+0x770/0x770 [ 708.115229][T18816] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 708.117597][T18816] do_filp_open+0x1de/0x430 [ 708.119363][T18816] ? may_open_dev+0xf0/0xf0 [ 708.121097][T18816] ? find_held_lock+0x2d/0x110 [ 708.122912][T18816] ? _raw_spin_unlock+0x28/0x40 [ 708.124935][T18816] ? alloc_fd+0x2da/0x6c0 [ 708.126618][T18816] do_sys_openat2+0x176/0x1e0 [ 708.128382][T18816] ? build_open_flags+0x690/0x690 [ 708.130385][T18816] __x64_sys_open+0x154/0x1e0 [ 708.132418][T18816] ? do_sys_open+0x160/0x160 [ 708.134489][T18816] ? syscall_enter_from_user_mode+0x26/0x80 [ 708.136763][T18816] ? lockdep_hardirqs_on+0x7d/0x100 [ 708.138673][T18816] do_syscall_64+0x38/0xb0 [ 708.140317][T18816] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 708.142527][T18816] RIP: 0033:0x7f4ec1c7cae9 [ 708.144289][T18816] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 708.151836][T18816] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 708.155327][T18816] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 708.158591][T18816] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 708.162091][T18816] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 708.165624][T18816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.168730][T18816] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 708.171945][T18816] 18:05:25 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 24) 18:05:25 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) 18:05:25 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x5, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:25 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:25 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) 18:05:25 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x6, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:25 executing program 3: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x101041, 0x0) 18:05:25 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x7, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 708.266763][T18830] overlayfs: failed to resolve './file1': -2 [ 708.842170][T18836] FAULT_INJECTION: forcing a failure. [ 708.842170][T18836] name failslab, interval 1, probability 0, space 0, times 0 [ 708.847591][T18836] CPU: 2 PID: 18836 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 708.852477][T18836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 708.857190][T18836] Call Trace: [ 708.858759][T18836] [ 708.860156][T18836] dump_stack_lvl+0x125/0x1b0 [ 708.862395][T18836] should_fail_ex+0x496/0x5b0 [ 708.864632][T18836] ? ima_collect_measurement+0x3e1/0x6f0 [ 708.867245][T18836] should_failslab+0x9/0x20 [ 708.869409][T18836] __kmem_cache_alloc_node+0x5f/0x470 [ 708.871952][T18836] ? ima_collect_measurement+0x3e1/0x6f0 [ 708.874739][T18836] __kmalloc_node_track_caller+0x50/0x100 [ 708.877428][T18836] krealloc+0x5d/0x100 [ 708.879386][T18836] ima_collect_measurement+0x3e1/0x6f0 [ 708.881969][T18836] ? ima_get_action+0xa0/0xa0 [ 708.884208][T18836] ? revert_creds+0x1ce/0x250 [ 708.886436][T18836] ? vfs_getxattr_alloc+0xf1/0x340 [ 708.888852][T18836] ? ima_get_cache_status+0x1c0/0x1c0 [ 708.891384][T18836] process_measurement+0xc87/0x1cc0 [ 708.893866][T18836] ? mmap_violation_check+0x1f0/0x1f0 [ 708.896406][T18836] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 708.899589][T18836] ? selinux_inode_create+0x30/0x30 [ 708.902068][T18836] ? ovl_open+0xfc/0x330 [ 708.904080][T18836] ? ovl_llseek+0x380/0x380 [ 708.906229][T18836] ima_file_check+0xc2/0x110 [ 708.908429][T18836] ? process_measurement+0x1cc0/0x1cc0 [ 708.910986][T18836] ? ovl_llseek+0x380/0x380 [ 708.913162][T18836] ? may_open+0x1f2/0x400 [ 708.915213][T18836] path_openat+0x17a1/0x29c0 [ 708.917405][T18836] ? path_lookupat+0x770/0x770 [ 708.919656][T18836] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 708.922423][T18836] do_filp_open+0x1de/0x430 [ 708.924486][T18836] ? may_open_dev+0xf0/0xf0 [ 708.926575][T18836] ? find_held_lock+0x2d/0x110 [ 708.928851][T18836] ? _raw_spin_unlock+0x28/0x40 [ 708.931159][T18836] ? alloc_fd+0x2da/0x6c0 [ 708.933238][T18836] do_sys_openat2+0x176/0x1e0 [ 708.935454][T18836] ? build_open_flags+0x690/0x690 [ 708.937956][T18836] __x64_sys_open+0x154/0x1e0 [ 708.940197][T18836] ? do_sys_open+0x160/0x160 [ 708.942348][T18836] ? syscall_enter_from_user_mode+0x26/0x80 [ 708.945019][T18836] ? lockdep_hardirqs_on+0x7d/0x100 [ 708.947404][T18836] do_syscall_64+0x38/0xb0 [ 708.949416][T18836] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 708.952065][T18836] RIP: 0033:0x7f4ec1c7cae9 [ 708.954210][T18836] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 708.963141][T18836] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 708.967042][T18836] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 708.970764][T18836] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 708.974506][T18836] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 708.978178][T18836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 708.981872][T18836] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 708.985554][T18836] [ 708.990655][ T37] audit: type=1800 audit(1695578725.989:555): pid=18836 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="overlay" ino=1966 res=0 errno=0 18:05:26 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 25) 18:05:26 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0xe7, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:26 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x114000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:26 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:26 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x114000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:26 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x300, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:26 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x114000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x114000, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) 18:05:26 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x500, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 709.081779][T18847] overlayfs: failed to resolve './file1': -2 [ 709.666537][T18856] FAULT_INJECTION: forcing a failure. [ 709.666537][T18856] name failslab, interval 1, probability 0, space 0, times 0 [ 709.676437][T18856] CPU: 2 PID: 18856 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 709.681323][T18856] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 709.686046][T18856] Call Trace: [ 709.687647][T18856] [ 709.689064][T18856] dump_stack_lvl+0x125/0x1b0 [ 709.691332][T18856] should_fail_ex+0x496/0x5b0 [ 709.693618][T18856] should_failslab+0x9/0x20 [ 709.695808][T18856] kmem_cache_alloc+0x61/0x400 [ 709.698105][T18856] ? preempt_count_sub+0x150/0x150 [ 709.700551][T18856] mb_cache_entry_create+0xbd/0xa60 [ 709.702979][T18856] ext4_xattr_get+0x445/0x780 [ 709.705235][T18856] ? ext4_xattr_ibody_get+0x4d0/0x4d0 [ 709.707745][T18856] ? selinux_inode_getsecurity+0x1b5/0x290 [ 709.710493][T18856] ? xattr_resolve_name+0x27b/0x3f0 [ 709.712867][T18856] ? ext4_xattr_security_set+0x50/0x50 [ 709.715333][T18856] __vfs_getxattr+0x13b/0x1a0 [ 709.717465][T18856] ? xattr_full_name+0x90/0x90 [ 709.719633][T18856] ? security_inode_getsecurity+0xfd/0x140 [ 709.722262][T18856] vfs_getxattr+0x249/0x280 [ 709.724305][T18856] ? xattr_permission+0x240/0x240 [ 709.726574][T18856] ? preempt_count_sub+0x150/0x150 [ 709.728934][T18856] ovl_xattr_get+0xf6/0x160 [ 709.731007][T18856] ? ovl_xattr_set+0x5c0/0x5c0 [ 709.733191][T18856] ? process_measurement+0x893/0x1cc0 [ 709.735584][T18856] ? xattr_resolve_name+0x27b/0x3f0 [ 709.737922][T18856] ? ovl_other_xattr_set+0x50/0x50 [ 709.740247][T18856] vfs_getxattr_alloc+0x1ba/0x340 [ 709.742511][T18856] ? vfs_setxattr+0x350/0x350 [ 709.744665][T18856] ima_read_xattr+0x38/0x60 [ 709.746767][T18856] process_measurement+0xc09/0x1cc0 [ 709.749121][T18856] ? mmap_violation_check+0x1f0/0x1f0 [ 709.751530][T18856] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 709.754581][T18856] ? selinux_inode_create+0x30/0x30 [ 709.756938][T18856] ? ovl_open+0xfc/0x330 [ 709.758865][T18856] ? ovl_llseek+0x380/0x380 [ 709.760953][T18856] ima_file_check+0xc2/0x110 [ 709.763033][T18856] ? process_measurement+0x1cc0/0x1cc0 [ 709.765494][T18856] ? ovl_llseek+0x380/0x380 [ 709.767573][T18856] ? may_open+0x1f2/0x400 [ 709.769547][T18856] path_openat+0x17a1/0x29c0 [ 709.771690][T18856] ? path_lookupat+0x770/0x770 [ 709.773886][T18856] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 709.776613][T18856] do_filp_open+0x1de/0x430 [ 709.778677][T18856] ? may_open_dev+0xf0/0xf0 [ 709.780752][T18856] ? find_held_lock+0x2d/0x110 [ 709.782927][T18856] ? _raw_spin_unlock+0x28/0x40 [ 709.785161][T18856] ? alloc_fd+0x2da/0x6c0 [ 709.787128][T18856] do_sys_openat2+0x176/0x1e0 [ 709.789263][T18856] ? build_open_flags+0x690/0x690 [ 709.791544][T18856] __x64_sys_open+0x154/0x1e0 [ 709.793720][T18856] ? do_sys_open+0x160/0x160 [ 709.795827][T18856] ? syscall_enter_from_user_mode+0x26/0x80 [ 709.798501][T18856] ? lockdep_hardirqs_on+0x7d/0x100 [ 709.800957][T18856] do_syscall_64+0x38/0xb0 [ 709.802989][T18856] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 709.805684][T18856] RIP: 0033:0x7f4ec1c7cae9 [ 709.807698][T18856] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 709.816344][T18856] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 709.820083][T18856] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 709.823641][T18856] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 709.827150][T18856] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 709.830719][T18856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 709.834296][T18856] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 709.837640][T18856] 18:05:26 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 26) 18:05:26 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x600, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:26 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x200041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r2, 0xffffffffffffff54, 0xb3}) 18:05:26 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:26 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x700, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:26 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x200041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r2, 0xffffffffffffff54, 0xb3}) 18:05:26 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0xe7ff, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:26 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x200041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r2, 0xffffffffffffff54, 0xb3}) [ 709.935269][T18870] overlayfs: failed to resolve './file1': -2 [ 710.543557][T18876] FAULT_INJECTION: forcing a failure. [ 710.543557][T18876] name failslab, interval 1, probability 0, space 0, times 0 [ 710.549955][T18876] CPU: 1 PID: 18876 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 710.554900][T18876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 710.559640][T18876] Call Trace: [ 710.561243][T18876] [ 710.562656][T18876] dump_stack_lvl+0x125/0x1b0 [ 710.564901][T18876] should_fail_ex+0x496/0x5b0 [ 710.567153][T18876] should_failslab+0x9/0x20 [ 710.569345][T18876] __kmem_cache_alloc_node+0x5f/0x470 [ 710.571886][T18876] ? tomoyo_realpath_from_path+0xb9/0x710 [ 710.574639][T18876] __kmalloc+0x4f/0x100 [ 710.576612][T18876] tomoyo_realpath_from_path+0xb9/0x710 [ 710.579011][T18876] ? tomoyo_profile+0x47/0x60 [ 710.581250][T18876] tomoyo_path_perm+0x26f/0x450 [ 710.583556][T18876] ? tomoyo_path_perm+0x25b/0x450 [ 710.585970][T18876] ? tomoyo_check_open_permission+0x3b0/0x3b0 [ 710.588638][T18876] ? avc_has_perm+0x11b/0x1c0 [ 710.590899][T18876] ? make_vfsgid+0x108/0x160 [ 710.593136][T18876] ? from_vfsuid+0x170/0x170 [ 710.595265][T18876] ? ext4_getattr+0x335/0x770 [ 710.597371][T18876] ? ext4_file_getattr+0x257/0x380 [ 710.599724][T18876] security_inode_getattr+0xf1/0x150 [ 710.601735][T18876] vfs_getattr+0x25/0x60 [ 710.603610][T18876] ovl_getattr+0x28f/0xf70 [ 710.605637][T18876] ? ovl_inode_set+0x50/0x50 [ 710.607808][T18876] ? ext4_xattr_get+0x18b/0x780 [ 710.610163][T18876] ? ext4_xattr_security_set+0x50/0x50 [ 710.612771][T18876] ? __vfs_getxattr+0x143/0x1a0 [ 710.615103][T18876] ? xattr_full_name+0x90/0x90 [ 710.617437][T18876] ? ovl_inode_set+0x50/0x50 [ 710.619637][T18876] vfs_getattr_nosec+0x290/0x380 [ 710.622016][T18876] ima_collect_measurement+0x225/0x6f0 [ 710.624596][T18876] ? ima_get_action+0xa0/0xa0 [ 710.626827][T18876] ? revert_creds+0x1ce/0x250 [ 710.629049][T18876] ? vfs_getxattr_alloc+0xf1/0x340 [ 710.631477][T18876] ? ima_get_cache_status+0x1c0/0x1c0 [ 710.634092][T18876] process_measurement+0xc87/0x1cc0 [ 710.636568][T18876] ? mmap_violation_check+0x1f0/0x1f0 [ 710.639113][T18876] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 710.642310][T18876] ? selinux_inode_create+0x30/0x30 [ 710.644817][T18876] ? ovl_open+0xfc/0x330 [ 710.646816][T18876] ? ovl_llseek+0x380/0x380 [ 710.649010][T18876] ima_file_check+0xc2/0x110 [ 710.651219][T18876] ? process_measurement+0x1cc0/0x1cc0 [ 710.653843][T18876] ? ovl_llseek+0x380/0x380 [ 710.656031][T18876] ? may_open+0x1f2/0x400 [ 710.658113][T18876] path_openat+0x17a1/0x29c0 [ 710.660329][T18876] ? path_lookupat+0x770/0x770 [ 710.662640][T18876] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 710.665517][T18876] do_filp_open+0x1de/0x430 [ 710.667678][T18876] ? may_open_dev+0xf0/0xf0 [ 710.669848][T18876] ? find_held_lock+0x2d/0x110 [ 710.672145][T18876] ? _raw_spin_unlock+0x28/0x40 [ 710.674517][T18876] ? alloc_fd+0x2da/0x6c0 [ 710.676649][T18876] do_sys_openat2+0x176/0x1e0 [ 710.678755][T18876] ? build_open_flags+0x690/0x690 [ 710.680817][T18876] __x64_sys_open+0x154/0x1e0 [ 710.682547][T18876] ? do_sys_open+0x160/0x160 [ 710.684441][T18876] ? syscall_enter_from_user_mode+0x26/0x80 [ 710.686757][T18876] ? lockdep_hardirqs_on+0x7d/0x100 [ 710.688715][T18876] do_syscall_64+0x38/0xb0 [ 710.690622][T18876] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 710.693150][T18876] RIP: 0033:0x7f4ec1c7cae9 [ 710.694851][T18876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 710.703542][T18876] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 710.707430][T18876] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 710.711159][T18876] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 710.714914][T18876] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 710.718639][T18876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 710.722368][T18876] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 710.726107][T18876] [ 710.729276][T18876] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:27 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0xfdfd, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:27 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:27 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 27) 18:05:27 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:27 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) 18:05:27 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0xffe7, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:27 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) 18:05:27 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x1000000, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:27 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7f, 0x101000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f00000001c0)={0x38, 0x8, r3, 0x0, 0x6, 0x71b15, 0x97, &(0x7f0000000100)="89e88a014286296c27c23a7b3e67c72d8eca85933f42aac8a158799b52baf89c9b794e085d99ab2524429ff958d9d8cbc724a55decc4eb026a8248fbe1c01106b2ea57d556ffcf5537922fcdd2c871115a90b7551e842e8fd2fee7b28580520e15e5c79f84c865f980dad247997448e830da5546ce9a30215f7c3b52fd3c2a274717d1d502bd08001404efdfba0aaac48857ef60ef8ccc", 0x10000}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040055) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000040)={0x18, r4, 0xffffffffffffff54, 0xb9}) 18:05:27 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x2000000, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 711.540972][T18902] FAULT_INJECTION: forcing a failure. [ 711.540972][T18902] name failslab, interval 1, probability 0, space 0, times 0 [ 711.547700][T18902] CPU: 0 PID: 18902 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 711.552586][T18902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 711.557318][T18902] Call Trace: [ 711.558892][T18902] [ 711.560295][T18902] dump_stack_lvl+0x125/0x1b0 [ 711.562541][T18902] should_fail_ex+0x496/0x5b0 [ 711.564793][T18902] should_failslab+0x9/0x20 [ 711.566957][T18902] __kmem_cache_alloc_node+0x5f/0x470 [ 711.569483][T18902] kmalloc_trace+0x25/0xe0 [ 711.571597][T18902] ima_calc_file_hash_tfm+0x29d/0x3d0 [ 711.574151][T18902] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 711.576740][T18902] ? ext4_xattr_security_set+0x50/0x50 [ 711.579283][T18902] ? __vfs_getxattr+0x143/0x1a0 [ 711.581576][T18902] ? xattr_full_name+0x90/0x90 [ 711.583831][T18902] ? ima_alloc_tfm+0x21d/0x2d0 [ 711.586107][T18902] ima_calc_file_hash+0x1c6/0x4a0 [ 711.588499][T18902] ima_collect_measurement+0x5e2/0x6f0 [ 711.591063][T18902] ? ima_get_action+0xa0/0xa0 [ 711.593324][T18902] ? revert_creds+0x1ce/0x250 [ 711.595560][T18902] ? vfs_getxattr_alloc+0xf1/0x340 [ 711.597980][T18902] ? ima_get_cache_status+0x1c0/0x1c0 [ 711.600526][T18902] process_measurement+0xc87/0x1cc0 [ 711.602956][T18902] ? mmap_violation_check+0x1f0/0x1f0 [ 711.605469][T18902] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 711.608617][T18902] ? selinux_inode_create+0x30/0x30 [ 711.611077][T18902] ? ovl_open+0xfc/0x330 [ 711.613110][T18902] ? ovl_llseek+0x380/0x380 [ 711.615268][T18902] ima_file_check+0xc2/0x110 [ 711.617471][T18902] ? process_measurement+0x1cc0/0x1cc0 [ 711.620021][T18902] ? ovl_llseek+0x380/0x380 [ 711.622116][T18902] ? may_open+0x1f2/0x400 [ 711.624045][T18902] path_openat+0x17a1/0x29c0 [ 711.626245][T18902] ? path_lookupat+0x770/0x770 [ 711.628525][T18902] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 711.631338][T18902] do_filp_open+0x1de/0x430 [ 711.633295][T18902] ? may_open_dev+0xf0/0xf0 [ 711.635021][T18902] ? find_held_lock+0x2d/0x110 [ 711.637299][T18902] ? _raw_spin_unlock+0x28/0x40 [ 711.639577][T18902] ? alloc_fd+0x2da/0x6c0 [ 711.641640][T18902] do_sys_openat2+0x176/0x1e0 [ 711.643786][T18902] ? build_open_flags+0x690/0x690 [ 711.646172][T18902] __x64_sys_open+0x154/0x1e0 [ 711.648411][T18902] ? do_sys_open+0x160/0x160 [ 711.650633][T18902] ? syscall_enter_from_user_mode+0x26/0x80 [ 711.653446][T18902] ? lockdep_hardirqs_on+0x7d/0x100 [ 711.655923][T18902] do_syscall_64+0x38/0xb0 [ 711.658035][T18902] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 711.660813][T18902] RIP: 0033:0x7f4ec1c7cae9 [ 711.662907][T18902] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 711.671857][T18902] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 711.675672][T18902] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 711.679155][T18902] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 711.682845][T18902] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 711.686316][T18902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 711.690088][T18902] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 711.693766][T18902] [ 711.699414][ T37] audit: type=1800 audit(1695578728.699:556): pid=18902 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="overlay" ino=1967 res=0 errno=0 18:05:28 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x3000000, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:28 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7f, 0x101000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f00000001c0)={0x38, 0x8, r3, 0x0, 0x6, 0x71b15, 0x97, &(0x7f0000000100)="89e88a014286296c27c23a7b3e67c72d8eca85933f42aac8a158799b52baf89c9b794e085d99ab2524429ff958d9d8cbc724a55decc4eb026a8248fbe1c01106b2ea57d556ffcf5537922fcdd2c871115a90b7551e842e8fd2fee7b28580520e15e5c79f84c865f980dad247997448e830da5546ce9a30215f7c3b52fd3c2a274717d1d502bd08001404efdfba0aaac48857ef60ef8ccc", 0x10000}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040055) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000040)={0x18, r4, 0xffffffffffffff54, 0xb9}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$vcsn(&(0x7f00000000c0), 0x7f, 0x101000) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (async) sendfile(r2, r3, 0x0, 0x800000080004105) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f00000001c0)={0x38, 0x8, r3, 0x0, 0x6, 0x71b15, 0x97, &(0x7f0000000100)="89e88a014286296c27c23a7b3e67c72d8eca85933f42aac8a158799b52baf89c9b794e085d99ab2524429ff958d9d8cbc724a55decc4eb026a8248fbe1c01106b2ea57d556ffcf5537922fcdd2c871115a90b7551e842e8fd2fee7b28580520e15e5c79f84c865f980dad247997448e830da5546ce9a30215f7c3b52fd3c2a274717d1d502bd08001404efdfba0aaac48857ef60ef8ccc", 0x10000}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040055) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000040)={0x18, r4, 0xffffffffffffff54, 0xb9}) (async) 18:05:28 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:28 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 28) 18:05:28 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x4000000, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:28 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x5000000, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:28 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x6000000, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:28 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x7f, 0x101000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r1, 0x3ba0, &(0x7f00000001c0)={0x38, 0x8, r3, 0x0, 0x6, 0x71b15, 0x97, &(0x7f0000000100)="89e88a014286296c27c23a7b3e67c72d8eca85933f42aac8a158799b52baf89c9b794e085d99ab2524429ff958d9d8cbc724a55decc4eb026a8248fbe1c01106b2ea57d556ffcf5537922fcdd2c871115a90b7551e842e8fd2fee7b28580520e15e5c79f84c865f980dad247997448e830da5546ce9a30215f7c3b52fd3c2a274717d1d502bd08001404efdfba0aaac48857ef60ef8ccc", 0x10000}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4040055) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000040)={0x18, r4, 0xffffffffffffff54, 0xb9}) 18:05:28 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x7000000, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:28 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0xe7ffffff, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:29 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) [ 712.581877][T18930] FAULT_INJECTION: forcing a failure. [ 712.581877][T18930] name failslab, interval 1, probability 0, space 0, times 0 [ 712.587945][T18930] CPU: 1 PID: 18930 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 712.592793][T18930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 712.597525][T18930] Call Trace: [ 712.599065][T18930] [ 712.600491][T18930] dump_stack_lvl+0x125/0x1b0 [ 712.602648][T18930] should_fail_ex+0x496/0x5b0 [ 712.604859][T18930] should_failslab+0x9/0x20 [ 712.606988][T18930] __kmem_cache_alloc_node+0x5f/0x470 [ 712.609474][T18930] ? tomoyo_realpath_from_path+0xb9/0x710 [ 712.612089][T18930] __kmalloc+0x4f/0x100 [ 712.613996][T18930] tomoyo_realpath_from_path+0xb9/0x710 [ 712.616602][T18930] ? tomoyo_profile+0x47/0x60 [ 712.618744][T18930] tomoyo_path_perm+0x26f/0x450 [ 712.620853][T18930] ? tomoyo_path_perm+0x25b/0x450 [ 712.623142][T18930] ? tomoyo_check_open_permission+0x3b0/0x3b0 [ 712.625899][T18930] ? path_openat+0x17a1/0x29c0 [ 712.627798][T18930] ? find_held_lock+0x2d/0x110 [ 712.629949][T18930] security_inode_getattr+0xf1/0x150 [ 712.632302][T18930] vfs_getattr+0x25/0x60 [ 712.634283][T18930] ovl_getattr+0x16c/0xf70 [ 712.636262][T18930] ? ovl_inode_set+0x50/0x50 [ 712.638144][T18930] ? ext4_xattr_get+0x18b/0x780 [ 712.640162][T18930] ? ext4_xattr_ibody_get+0x4d0/0x4d0 [ 712.642345][T18930] ? selinux_inode_getsecurity+0x1b5/0x290 [ 712.644637][T18930] ? xattr_resolve_name+0x27b/0x3f0 [ 712.646816][T18930] ? ext4_xattr_security_set+0x50/0x50 [ 712.648926][T18930] ? __vfs_getxattr+0x143/0x1a0 [ 712.650946][T18930] ? xattr_full_name+0x90/0x90 [ 712.653160][T18930] ? ovl_inode_set+0x50/0x50 [ 712.655130][T18930] vfs_getattr_nosec+0x290/0x380 [ 712.657329][T18930] ima_collect_measurement+0x225/0x6f0 [ 712.659698][T18930] ? ima_get_action+0xa0/0xa0 [ 712.661784][T18930] ? revert_creds+0x1ce/0x250 [ 712.663865][T18930] ? vfs_getxattr_alloc+0xf1/0x340 [ 712.665970][T18930] ? ima_get_cache_status+0x1c0/0x1c0 [ 712.668005][T18930] process_measurement+0xc87/0x1cc0 [ 712.670379][T18930] ? mmap_violation_check+0x1f0/0x1f0 [ 712.672660][T18930] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 712.675619][T18930] ? selinux_inode_create+0x30/0x30 [ 712.677618][T18930] ? ovl_open+0xfc/0x330 [ 712.679478][T18930] ? ovl_llseek+0x380/0x380 [ 712.681340][T18930] ima_file_check+0xc2/0x110 [ 712.683209][T18930] ? process_measurement+0x1cc0/0x1cc0 [ 712.685348][T18930] ? ovl_llseek+0x380/0x380 [ 712.687285][T18930] ? may_open+0x1f2/0x400 [ 712.689219][T18930] path_openat+0x17a1/0x29c0 [ 712.690995][T18930] ? path_lookupat+0x770/0x770 [ 712.692890][T18930] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 712.695174][T18930] do_filp_open+0x1de/0x430 [ 712.696870][T18930] ? may_open_dev+0xf0/0xf0 [ 712.698814][T18930] ? find_held_lock+0x2d/0x110 [ 712.700695][T18930] ? _raw_spin_unlock+0x28/0x40 [ 712.702897][T18930] ? alloc_fd+0x2da/0x6c0 [ 712.704847][T18930] do_sys_openat2+0x176/0x1e0 [ 712.706676][T18930] ? build_open_flags+0x690/0x690 [ 712.708830][T18930] __x64_sys_open+0x154/0x1e0 [ 712.710866][T18930] ? do_sys_open+0x160/0x160 [ 712.712742][T18930] ? syscall_enter_from_user_mode+0x26/0x80 [ 712.715051][T18930] ? lockdep_hardirqs_on+0x7d/0x100 [ 712.717070][T18930] do_syscall_64+0x38/0xb0 [ 712.718717][T18930] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 712.721047][T18930] RIP: 0033:0x7f4ec1c7cae9 [ 712.722791][T18930] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 712.730339][T18930] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 712.733615][T18930] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 712.736883][T18930] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 712.740147][T18930] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 712.743690][T18930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 712.747161][T18930] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 712.750821][T18930] [ 712.754985][T18930] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:29 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 29) 18:05:29 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0x9, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0x3}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r5, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/dvb_usb_vp7045', 0x0, 0x55) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, &(0x7f0000000140)={0x8, r6}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r9, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:29 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0xfdfdffff, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:29 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) [ 712.806369][T18937] iommufd_mock iommufd_mock1: Adding to iommu group 9 18:05:29 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0xfffffdfd, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:29 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0x9, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0x3}) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r5, 0x0, 0x80000000}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x4) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/dvb_usb_vp7045', 0x0, 0x55) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, &(0x7f0000000140)={0x8, r6}) (async) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r9, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 712.869056][T18942] iommufd_mock iommufd_mock1: Adding to iommu group 9 18:05:29 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0x9, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0x3}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r5, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/dvb_usb_vp7045', 0x0, 0x55) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, &(0x7f0000000140)={0x8, r6}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r9, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000002c0)={0x9}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r3, 0x0, 0x3}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r5, 0x0, 0x80000000}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r3}) (async) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x4) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/dvb_usb_vp7045', 0x0, 0x55) (async) ioctl$IOMMU_DESTROY$device(r7, 0x3b80, &(0x7f0000000140)={0x8, r6}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r9, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) 18:05:29 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0xffffff7f, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 712.925739][T18946] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 713.577071][T18959] FAULT_INJECTION: forcing a failure. [ 713.577071][T18959] name failslab, interval 1, probability 0, space 0, times 0 [ 713.582314][T18959] CPU: 1 PID: 18959 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 713.586690][T18959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 713.590924][T18959] Call Trace: [ 713.592348][T18959] [ 713.593548][T18959] dump_stack_lvl+0x125/0x1b0 [ 713.595148][T18959] should_fail_ex+0x496/0x5b0 [ 713.596769][T18959] should_failslab+0x9/0x20 [ 713.598608][T18959] __kmem_cache_alloc_node+0x5f/0x470 [ 713.600849][T18959] ? tomoyo_encode2+0x100/0x3d0 [ 713.602519][T18959] __kmalloc+0x4f/0x100 [ 713.603955][T18959] tomoyo_encode2+0x100/0x3d0 [ 713.605615][T18959] ? rcu_is_watching+0x12/0xb0 [ 713.607322][T18959] tomoyo_encode+0x29/0x50 [ 713.609177][T18959] tomoyo_realpath_from_path+0x196/0x710 [ 713.611482][T18959] ? tomoyo_profile+0x47/0x60 [ 713.613474][T18959] tomoyo_path_perm+0x26f/0x450 [ 713.615546][T18959] ? tomoyo_path_perm+0x25b/0x450 [ 713.617519][T18959] ? tomoyo_check_open_permission+0x3b0/0x3b0 [ 713.620060][T18959] ? avc_has_perm+0x11b/0x1c0 [ 713.622088][T18959] ? make_vfsgid+0x108/0x160 [ 713.624022][T18959] ? from_vfsuid+0x170/0x170 [ 713.626012][T18959] ? ext4_getattr+0x335/0x770 [ 713.627946][T18959] ? ext4_file_getattr+0x257/0x380 [ 713.630104][T18959] security_inode_getattr+0xf1/0x150 [ 713.632317][T18959] vfs_getattr+0x25/0x60 [ 713.634135][T18959] ovl_getattr+0x28f/0xf70 [ 713.636002][T18959] ? ovl_inode_set+0x50/0x50 [ 713.637956][T18959] ? ext4_xattr_get+0x18b/0x780 [ 713.640009][T18959] ? ext4_xattr_security_set+0x50/0x50 [ 713.642306][T18959] ? __vfs_getxattr+0x143/0x1a0 [ 713.644355][T18959] ? xattr_full_name+0x90/0x90 [ 713.646359][T18959] ? ovl_inode_set+0x50/0x50 [ 713.648305][T18959] vfs_getattr_nosec+0x290/0x380 [ 713.650409][T18959] ima_collect_measurement+0x225/0x6f0 [ 713.652711][T18959] ? ima_get_action+0xa0/0xa0 [ 713.654653][T18959] ? revert_creds+0x1ce/0x250 [ 713.656607][T18959] ? vfs_getxattr_alloc+0xf1/0x340 [ 713.658732][T18959] ? ima_get_cache_status+0x1c0/0x1c0 [ 713.660972][T18959] process_measurement+0xc87/0x1cc0 [ 713.663149][T18959] ? mmap_violation_check+0x1f0/0x1f0 [ 713.665368][T18959] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 713.668036][T18959] ? selinux_inode_create+0x30/0x30 [ 713.669873][T18959] ? ovl_open+0xfc/0x330 [ 713.671256][T18959] ? ovl_llseek+0x380/0x380 [ 713.673021][T18959] ima_file_check+0xc2/0x110 [ 713.674889][T18959] ? process_measurement+0x1cc0/0x1cc0 [ 713.677137][T18959] ? ovl_llseek+0x380/0x380 [ 713.679304][T18959] ? may_open+0x1f2/0x400 [ 713.681528][T18959] path_openat+0x17a1/0x29c0 [ 713.683381][T18959] ? path_lookupat+0x770/0x770 [ 713.685353][T18959] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 713.687852][T18959] do_filp_open+0x1de/0x430 [ 713.689639][T18959] ? may_open_dev+0xf0/0xf0 [ 713.691342][T18959] ? find_held_lock+0x2d/0x110 [ 713.693216][T18959] ? _raw_spin_unlock+0x28/0x40 [ 713.695079][T18959] ? alloc_fd+0x2da/0x6c0 [ 713.696766][T18959] do_sys_openat2+0x176/0x1e0 [ 713.698612][T18959] ? build_open_flags+0x690/0x690 [ 713.700498][T18959] __x64_sys_open+0x154/0x1e0 [ 713.702169][T18959] ? do_sys_open+0x160/0x160 [ 713.703869][T18959] ? syscall_enter_from_user_mode+0x26/0x80 [ 713.706054][T18959] ? lockdep_hardirqs_on+0x7d/0x100 [ 713.708044][T18959] do_syscall_64+0x38/0xb0 [ 713.709807][T18959] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 713.712247][T18959] RIP: 0033:0x7f4ec1c7cae9 [ 713.713892][T18959] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 713.720933][T18959] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 713.723899][T18959] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 713.726969][T18959] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 713.730047][T18959] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 713.733174][T18959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 713.736419][T18959] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 713.739374][T18959] [ 713.742717][T18959] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:30 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 30) 18:05:30 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0xffffffe7, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:30 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80402, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:30 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:30 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80402, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:30 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0xffffffff, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:30 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9028b72d19be9"}) 18:05:30 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80402, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 714.446316][T18979] FAULT_INJECTION: forcing a failure. [ 714.446316][T18979] name failslab, interval 1, probability 0, space 0, times 0 [ 714.452104][T18979] CPU: 2 PID: 18979 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 714.456773][T18979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 714.461373][T18979] Call Trace: [ 714.462979][T18979] [ 714.464427][T18979] dump_stack_lvl+0x125/0x1b0 [ 714.466668][T18979] should_fail_ex+0x496/0x5b0 [ 714.468903][T18979] should_failslab+0x9/0x20 [ 714.471049][T18979] __kmem_cache_alloc_node+0x5f/0x470 [ 714.473608][T18979] kmalloc_trace+0x25/0xe0 [ 714.475730][T18979] ima_calc_file_hash_tfm+0x29d/0x3d0 [ 714.478291][T18979] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 714.480873][T18979] ? ext4_xattr_security_set+0x50/0x50 [ 714.483414][T18979] ? __vfs_getxattr+0x143/0x1a0 [ 714.485686][T18979] ? xattr_full_name+0x90/0x90 [ 714.487874][T18979] ? ima_alloc_tfm+0x21d/0x2d0 [ 714.490160][T18979] ima_calc_file_hash+0x1c6/0x4a0 [ 714.492551][T18979] ima_collect_measurement+0x5e2/0x6f0 [ 714.495125][T18979] ? ima_get_action+0xa0/0xa0 [ 714.497358][T18979] ? revert_creds+0x1ce/0x250 [ 714.499612][T18979] ? vfs_getxattr_alloc+0xf1/0x340 [ 714.502005][T18979] ? ima_get_cache_status+0x1c0/0x1c0 [ 714.504545][T18979] process_measurement+0xc87/0x1cc0 [ 714.506947][T18979] ? mmap_violation_check+0x1f0/0x1f0 [ 714.509489][T18979] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 714.512697][T18979] ? selinux_inode_create+0x30/0x30 [ 714.515151][T18979] ? ovl_open+0xfc/0x330 [ 714.517175][T18979] ? ovl_llseek+0x380/0x380 [ 714.519321][T18979] ima_file_check+0xc2/0x110 [ 714.521551][T18979] ? process_measurement+0x1cc0/0x1cc0 [ 714.524107][T18979] ? ovl_llseek+0x380/0x380 [ 714.526268][T18979] ? may_open+0x1f2/0x400 [ 714.528241][T18979] path_openat+0x17a1/0x29c0 [ 714.530389][T18979] ? path_lookupat+0x770/0x770 [ 714.532674][T18979] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 714.535473][T18979] do_filp_open+0x1de/0x430 [ 714.537632][T18979] ? may_open_dev+0xf0/0xf0 [ 714.539764][T18979] ? find_held_lock+0x2d/0x110 [ 714.542035][T18979] ? _raw_spin_unlock+0x28/0x40 [ 714.544356][T18979] ? alloc_fd+0x2da/0x6c0 [ 714.546402][T18979] do_sys_openat2+0x176/0x1e0 [ 714.548654][T18979] ? build_open_flags+0x690/0x690 [ 714.551041][T18979] __x64_sys_open+0x154/0x1e0 [ 714.553305][T18979] ? do_sys_open+0x160/0x160 [ 714.555489][T18979] ? syscall_enter_from_user_mode+0x26/0x80 [ 714.558262][T18979] ? lockdep_hardirqs_on+0x7d/0x100 [ 714.560731][T18979] do_syscall_64+0x38/0xb0 [ 714.562831][T18979] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 714.565601][T18979] RIP: 0033:0x7f4ec1c7cae9 [ 714.567708][T18979] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 714.576687][T18979] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 714.580417][T18979] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 714.583936][T18979] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 714.587605][T18979] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 714.591313][T18979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 714.595012][T18979] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 714.598717][T18979] [ 714.603339][ T37] audit: type=1800 audit(1695578731.609:557): pid=18979 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="overlay" ino=1969 res=0 errno=0 18:05:31 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x8, 0x2a8000) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000140)=0x400, 0x2) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:31 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 31) 18:05:31 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:31 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:31 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x8, 0x2a8000) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000140)=0x400, 0x2) (async) sendfile(r2, r3, &(0x7f0000000140)=0x400, 0x2) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:31 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x2}) 18:05:31 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x8, 0x2a8000) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000140)=0x400, 0x2) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:31 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x3}) 18:05:32 executing program 3: ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:32 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x4}) 18:05:32 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:32 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 32) 18:05:32 executing program 3: ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:32 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x5}) 18:05:32 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x6}) 18:05:32 executing program 3: ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) [ 715.443595][T19016] overlayfs: missing 'lowerdir' 18:05:32 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x7}) 18:05:32 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r2, 0xffffffffffffff54, 0xb3}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r3, 0x0, 0x2, 0x7f}) 18:05:32 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) [ 715.971398][T19031] overlayfs: missing 'lowerdir' [ 716.095650][T19028] FAULT_INJECTION: forcing a failure. [ 716.095650][T19028] name failslab, interval 1, probability 0, space 0, times 0 [ 716.101469][T19028] CPU: 2 PID: 19028 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 716.106313][T19028] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 716.110976][T19028] Call Trace: [ 716.112518][T19028] [ 716.113884][T19028] dump_stack_lvl+0x125/0x1b0 [ 716.116050][T19028] should_fail_ex+0x496/0x5b0 [ 716.118270][T19028] should_failslab+0x9/0x20 [ 716.120423][T19028] __kmem_cache_alloc_node+0x5f/0x470 [ 716.122929][T19028] kmalloc_trace+0x25/0xe0 [ 716.125014][T19028] ima_calc_file_hash_tfm+0x29d/0x3d0 [ 716.127526][T19028] ? calc_buffer_shash_tfm+0x2d0/0x2d0 [ 716.130096][T19028] ? ext4_xattr_security_set+0x50/0x50 [ 716.132649][T19028] ? __vfs_getxattr+0x143/0x1a0 [ 716.134943][T19028] ? xattr_full_name+0x90/0x90 [ 716.137169][T19028] ? ima_alloc_tfm+0x21d/0x2d0 [ 716.139387][T19028] ima_calc_file_hash+0x1c6/0x4a0 [ 716.141717][T19028] ima_collect_measurement+0x5e2/0x6f0 [ 716.144198][T19028] ? ima_get_action+0xa0/0xa0 [ 716.146410][T19028] ? revert_creds+0x1ce/0x250 [ 716.148586][T19028] ? vfs_getxattr_alloc+0xf1/0x340 [ 716.150940][T19028] ? ima_get_cache_status+0x1c0/0x1c0 [ 716.153478][T19028] process_measurement+0xc87/0x1cc0 [ 716.155839][T19028] ? mmap_violation_check+0x1f0/0x1f0 [ 716.158301][T19028] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 716.161481][T19028] ? selinux_inode_create+0x30/0x30 [ 716.163944][T19028] ? ovl_open+0xfc/0x330 [ 716.165954][T19028] ? ovl_llseek+0x380/0x380 [ 716.168080][T19028] ima_file_check+0xc2/0x110 [ 716.170286][T19028] ? process_measurement+0x1cc0/0x1cc0 [ 716.172863][T19028] ? ovl_llseek+0x380/0x380 [ 716.174989][T19028] ? may_open+0x1f2/0x400 [ 716.177042][T19028] path_openat+0x17a1/0x29c0 [ 716.179240][T19028] ? path_lookupat+0x770/0x770 [ 716.181518][T19028] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 716.184364][T19028] do_filp_open+0x1de/0x430 [ 716.186545][T19028] ? may_open_dev+0xf0/0xf0 [ 716.188696][T19028] ? find_held_lock+0x2d/0x110 [ 716.190929][T19028] ? _raw_spin_unlock+0x28/0x40 [ 716.193248][T19028] ? alloc_fd+0x2da/0x6c0 [ 716.195293][T19028] do_sys_openat2+0x176/0x1e0 [ 716.197523][T19028] ? build_open_flags+0x690/0x690 [ 716.199910][T19028] __x64_sys_open+0x154/0x1e0 [ 716.202166][T19028] ? do_sys_open+0x160/0x160 [ 716.204348][T19028] ? syscall_enter_from_user_mode+0x26/0x80 [ 716.207112][T19028] ? lockdep_hardirqs_on+0x7d/0x100 [ 716.209572][T19028] do_syscall_64+0x38/0xb0 [ 716.211595][T19028] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 716.214364][T19028] RIP: 0033:0x7f4ec1c7cae9 [ 716.216466][T19028] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 716.225350][T19028] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 716.229263][T19028] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 716.232986][T19028] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 716.236659][T19028] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 716.240344][T19028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 716.244038][T19028] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 716.247530][T19028] [ 716.252636][ T37] audit: type=1800 audit(1695578733.249:558): pid=19028 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="overlay" ino=1967 res=0 errno=0 18:05:33 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r2, 0xffffffffffffff54, 0xb3}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r3, 0x0, 0x2, 0x7f}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r2, 0xffffffffffffff54, 0xb3}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r3, 0x0, 0x2, 0x7f}) (async) 18:05:33 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:33 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0xe7}) 18:05:33 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 33) 18:05:33 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r2, 0xffffffffffffff54, 0xb3}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r3, 0x0, 0x2, 0x7f}) 18:05:33 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x300}) 18:05:33 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x404080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:33 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x500}) [ 716.555111][T19050] overlayfs: missing 'lowerdir' [ 717.142124][T19054] FAULT_INJECTION: forcing a failure. [ 717.142124][T19054] name failslab, interval 1, probability 0, space 0, times 0 [ 717.148692][T19054] CPU: 1 PID: 19054 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 717.153228][T19054] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 717.157234][T19054] Call Trace: [ 717.158727][T19054] [ 717.160046][T19054] dump_stack_lvl+0x125/0x1b0 [ 717.161818][T19054] should_fail_ex+0x496/0x5b0 [ 717.163805][T19054] should_failslab+0x9/0x20 [ 717.165630][T19054] __kmem_cache_alloc_node+0x5f/0x470 [ 717.168017][T19054] ? ima_write_template_field_data+0x59/0x1e0 [ 717.170704][T19054] __kmalloc+0x4f/0x100 [ 717.172558][T19054] ima_write_template_field_data+0x59/0x1e0 [ 717.175166][T19054] ima_alloc_init_template+0x396/0x720 [ 717.177607][T19054] ima_store_measurement+0x1f0/0x5d0 [ 717.179892][T19054] ? ima_collect_measurement+0x6f0/0x6f0 [ 717.181960][T19054] ? d_absolute_path+0x137/0x1a0 [ 717.183821][T19054] process_measurement+0x1759/0x1cc0 [ 717.185912][T19054] ? mmap_violation_check+0x1f0/0x1f0 [ 717.188264][T19054] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 717.190946][T19054] ? selinux_inode_create+0x30/0x30 [ 717.193225][T19054] ? ovl_open+0xfc/0x330 [ 717.195064][T19054] ? ovl_llseek+0x380/0x380 [ 717.197001][T19054] ima_file_check+0xc2/0x110 [ 717.199076][T19054] ? process_measurement+0x1cc0/0x1cc0 [ 717.201431][T19054] ? ovl_llseek+0x380/0x380 [ 717.203387][T19054] ? may_open+0x1f2/0x400 [ 717.205198][T19054] path_openat+0x17a1/0x29c0 [ 717.207131][T19054] ? path_lookupat+0x770/0x770 [ 717.209234][T19054] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 717.211749][T19054] do_filp_open+0x1de/0x430 [ 717.213796][T19054] ? may_open_dev+0xf0/0xf0 [ 717.215768][T19054] ? find_held_lock+0x2d/0x110 [ 717.217821][T19054] ? _raw_spin_unlock+0x28/0x40 [ 717.219799][T19054] ? alloc_fd+0x2da/0x6c0 [ 717.221815][T19054] do_sys_openat2+0x176/0x1e0 [ 717.224006][T19054] ? build_open_flags+0x690/0x690 [ 717.226251][T19054] __x64_sys_open+0x154/0x1e0 [ 717.228429][T19054] ? do_sys_open+0x160/0x160 [ 717.230555][T19054] ? syscall_enter_from_user_mode+0x26/0x80 [ 717.232913][T19054] ? lockdep_hardirqs_on+0x7d/0x100 [ 717.234828][T19054] do_syscall_64+0x38/0xb0 [ 717.236484][T19054] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 717.238674][T19054] RIP: 0033:0x7f4ec1c7cae9 [ 717.240726][T19054] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 717.248165][T19054] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 717.251304][T19054] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 717.254478][T19054] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 717.257509][T19054] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 717.261149][T19054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 717.264570][T19054] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 717.267688][T19054] [ 717.271095][ T37] audit: type=1804 audit(1695578734.269:559): pid=19054 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=add_template_measure cause=ENOMEM comm="syz-executor.1" name="/syzkaller-testdir2404318525/syzkaller.x9zgeo/118/bus/file0" dev="overlay" ino=1970 res=0 errno=0 18:05:34 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 34) 18:05:34 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x404080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x404080, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) 18:05:34 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x600}) 18:05:34 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:34 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x404080, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:34 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x700}) 18:05:34 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r2, 0x0, 0x3}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x202400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r6, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000100)={0x8, r6}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r7, 0xffffffffffffff54, 0xb3}) [ 717.382113][T19066] overlayfs: missing 'lowerdir' 18:05:34 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0xe7ff}) [ 717.395764][T19067] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 718.068193][T19074] FAULT_INJECTION: forcing a failure. [ 718.068193][T19074] name failslab, interval 1, probability 0, space 0, times 0 [ 718.076387][T19074] CPU: 1 PID: 19074 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 718.081224][T19074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 718.085985][T19074] Call Trace: [ 718.087592][T19074] [ 718.089014][T19074] dump_stack_lvl+0x125/0x1b0 [ 718.091254][T19074] should_fail_ex+0x496/0x5b0 [ 718.093556][T19074] should_failslab+0x9/0x20 [ 718.095729][T19074] __kmem_cache_alloc_node+0x5f/0x470 [ 718.097955][T19074] ? ima_write_template_field_data+0x59/0x1e0 [ 718.100790][T19074] __kmalloc+0x4f/0x100 [ 718.102764][T19074] ima_write_template_field_data+0x59/0x1e0 [ 718.105377][T19074] ima_alloc_init_template+0x396/0x720 [ 718.107380][T19074] ima_store_measurement+0x1f0/0x5d0 [ 718.109830][T19074] ? ima_collect_measurement+0x6f0/0x6f0 [ 718.112584][T19074] ? d_absolute_path+0x137/0x1a0 [ 718.114942][T19074] process_measurement+0x1759/0x1cc0 [ 718.117462][T19074] ? mmap_violation_check+0x1f0/0x1f0 [ 718.120000][T19074] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 718.123211][T19074] ? selinux_inode_create+0x30/0x30 [ 718.125701][T19074] ? ovl_open+0xfc/0x330 [ 718.127697][T19074] ? ovl_llseek+0x380/0x380 [ 718.129855][T19074] ima_file_check+0xc2/0x110 [ 718.132009][T19074] ? process_measurement+0x1cc0/0x1cc0 [ 718.134682][T19074] ? ovl_llseek+0x380/0x380 [ 718.136877][T19074] ? may_open+0x1f2/0x400 [ 718.138929][T19074] path_openat+0x17a1/0x29c0 [ 718.141255][T19074] ? path_lookupat+0x770/0x770 [ 718.143528][T19074] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 718.146293][T19074] do_filp_open+0x1de/0x430 [ 718.148314][T19074] ? may_open_dev+0xf0/0xf0 [ 718.150498][T19074] ? find_held_lock+0x2d/0x110 [ 718.152890][T19074] ? _raw_spin_unlock+0x28/0x40 [ 718.155220][T19074] ? alloc_fd+0x2da/0x6c0 [ 718.157275][T19074] do_sys_openat2+0x176/0x1e0 [ 718.159630][T19074] ? build_open_flags+0x690/0x690 [ 718.162089][T19074] __x64_sys_open+0x154/0x1e0 [ 718.164354][T19074] ? do_sys_open+0x160/0x160 [ 718.166567][T19074] ? syscall_enter_from_user_mode+0x26/0x80 [ 718.169429][T19074] ? lockdep_hardirqs_on+0x7d/0x100 [ 718.171876][T19074] do_syscall_64+0x38/0xb0 [ 718.174008][T19074] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 718.176839][T19074] RIP: 0033:0x7f4ec1c7cae9 [ 718.178969][T19074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 718.187969][T19074] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 718.191532][T19074] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 718.195193][T19074] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 718.198956][T19074] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 718.202648][T19074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 718.206362][T19074] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 718.209992][T19074] [ 718.220399][ T37] audit: type=1804 audit(1695578735.219:560): pid=19074 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=add_template_measure cause=ENOMEM comm="syz-executor.1" name="/syzkaller-testdir2404318525/syzkaller.x9zgeo/119/bus/file0" dev="overlay" ino=1967 res=0 errno=0 18:05:35 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 35) 18:05:35 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0xfdfd}) 18:05:35 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r2, 0x0, 0x3}) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x202400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x80000000}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r6, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000100)={0x8, r6}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r7, 0xffffffffffffff54, 0xb3}) 18:05:35 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:35 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0xffe7}) 18:05:35 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r2, 0x0, 0x3}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x202400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r6, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000100)={0x8, r6}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r7, 0xffffffffffffff54, 0xb3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r2, 0x0, 0x3}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x202400, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x80000000}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r6, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000100)={0x8, r6}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r7, 0xffffffffffffff54, 0xb3}) (async) 18:05:35 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x1000000}) [ 718.310029][T19086] iommufd_mock iommufd_mock1: Adding to iommu group 9 18:05:35 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x2000000}) [ 718.336127][T19092] overlayfs: missing 'lowerdir' 18:05:35 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x8200, 0x80) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r4, 0x0, 0x3}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r6, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000002c0)={0x18, r4, 0x9, 0x0, &(0x7f0000000200)=[{0x0, 0x4}, {0x2}, {0x2, 0x7}, {0x1ff, 0x1}, {0x3ff, 0x724bd1cb}, {0xcd, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0xffffffff, 0x1ff}]}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000180)={0x18, r7, 0x2, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100}) 18:05:35 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x3000000}) 18:05:35 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 36) 18:05:35 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) [ 718.932748][T19102] iommufd_mock iommufd_mock1: Adding to iommu group 9 18:05:35 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x4000000}) 18:05:35 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x8200, 0x80) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r4, 0x0, 0x3}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r6, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000002c0)={0x18, r4, 0x9, 0x0, &(0x7f0000000200)=[{0x0, 0x4}, {0x2}, {0x2, 0x7}, {0x1ff, 0x1}, {0x3ff, 0x724bd1cb}, {0xcd, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0xffffffff, 0x1ff}]}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000180)={0x18, r7, 0x2, 0x2}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100}) 18:05:35 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x5000000}) [ 718.985500][T19108] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 719.000064][T19112] overlayfs: missing 'lowerdir' 18:05:36 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x6000000}) 18:05:36 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x8200, 0x80) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r4, 0x0, 0x3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r6, 0x0, 0x80000000}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r6, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r4}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000002c0)={0x18, r4, 0x9, 0x0, &(0x7f0000000200)=[{0x0, 0x4}, {0x2}, {0x2, 0x7}, {0x1ff, 0x1}, {0x3ff, 0x724bd1cb}, {0xcd, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0xffffffff, 0x1ff}]}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000002c0)={0x18, r4, 0x9, 0x0, &(0x7f0000000200)=[{0x0, 0x4}, {0x2}, {0x2, 0x7}, {0x1ff, 0x1}, {0x3ff, 0x724bd1cb}, {0xcd, 0x1}, {0x1, 0x2}, {0x2, 0x8}, {0xffffffff, 0x1ff}]}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000180)={0x18, r7, 0x2, 0x2}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000180)={0x18, r7, 0x2, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100}) 18:05:36 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x7000000}) [ 719.071339][T19118] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 719.721318][T19124] FAULT_INJECTION: forcing a failure. [ 719.721318][T19124] name failslab, interval 1, probability 0, space 0, times 0 [ 719.727568][T19124] CPU: 3 PID: 19124 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 719.732403][T19124] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 719.737012][T19124] Call Trace: [ 719.738574][T19124] [ 719.739960][T19124] dump_stack_lvl+0x125/0x1b0 [ 719.742142][T19124] should_fail_ex+0x496/0x5b0 [ 719.744373][T19124] should_failslab+0x9/0x20 [ 719.746418][T19124] kmem_cache_alloc+0x61/0x400 [ 719.748541][T19124] ima_d_path+0x51/0x1f0 [ 719.750509][T19124] process_measurement+0x1704/0x1cc0 [ 719.752818][T19124] ? mmap_violation_check+0x1f0/0x1f0 [ 719.754787][T19124] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 719.757814][T19124] ? selinux_inode_create+0x30/0x30 [ 719.760179][T19124] ? ovl_open+0xfc/0x330 [ 719.762153][T19124] ? ovl_llseek+0x380/0x380 [ 719.764255][T19124] ima_file_check+0xc2/0x110 [ 719.766412][T19124] ? process_measurement+0x1cc0/0x1cc0 [ 719.768892][T19124] ? ovl_llseek+0x380/0x380 [ 719.770980][T19124] ? may_open+0x1f2/0x400 [ 719.772989][T19124] path_openat+0x17a1/0x29c0 [ 719.775119][T19124] ? path_lookupat+0x770/0x770 [ 719.777382][T19124] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 719.780220][T19124] do_filp_open+0x1de/0x430 [ 719.782378][T19124] ? may_open_dev+0xf0/0xf0 [ 719.784538][T19124] ? find_held_lock+0x2d/0x110 [ 719.786821][T19124] ? _raw_spin_unlock+0x28/0x40 [ 719.789144][T19124] ? alloc_fd+0x2da/0x6c0 [ 719.791163][T19124] do_sys_openat2+0x176/0x1e0 [ 719.793406][T19124] ? build_open_flags+0x690/0x690 [ 719.795783][T19124] __x64_sys_open+0x154/0x1e0 [ 719.798064][T19124] ? do_sys_open+0x160/0x160 [ 719.800212][T19124] ? syscall_enter_from_user_mode+0x26/0x80 [ 719.802968][T19124] ? lockdep_hardirqs_on+0x7d/0x100 [ 719.805914][T19124] do_syscall_64+0x38/0xb0 [ 719.807970][T19124] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 719.810745][T19124] RIP: 0033:0x7f4ec1c7cae9 [ 719.812886][T19124] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 719.821754][T19124] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 719.825661][T19124] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 719.829362][T19124] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 719.833046][T19124] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 719.836627][T19124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 719.840327][T19124] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 719.844003][T19124] 18:05:36 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0xe7ffffff}) 18:05:36 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:36 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r2, 0x0, 0x3}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x80000000}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000140)={0x38, 0x1, r4, 0x0, 0x20, 0x81}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r8, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r8, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r9, 0xffffffffffffff54, 0xb3}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = getpid() sched_setscheduler(r11, 0x1, &(0x7f0000000240)=0x1) r12 = syz_open_procfs(r11, &(0x7f0000000080)='mountinfo\x00') sendfile(r10, r12, 0x0, 0x800000080004105) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000040)={0xc}) 18:05:36 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 37) 18:05:36 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0xfdfdffff}) [ 719.904379][T19128] iommufd_mock iommufd_mock1: Adding to iommu group 9 18:05:36 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0xfffffdfd}) 18:05:36 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r2, 0x0, 0x3}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x80000000}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000140)={0x38, 0x1, r4, 0x0, 0x20, 0x81}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2}) (async) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r8, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r8, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r9, 0xffffffffffffff54, 0xb3}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r11 = getpid() sched_setscheduler(r11, 0x1, &(0x7f0000000240)=0x1) (async) r12 = syz_open_procfs(r11, &(0x7f0000000080)='mountinfo\x00') sendfile(r10, r12, 0x0, 0x800000080004105) (async) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000040)={0xc}) 18:05:36 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0xffffff7f}) [ 719.955077][T19138] overlayfs: missing 'lowerdir' 18:05:36 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0xffffffe7}) 18:05:36 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r2, 0x0, 0x3}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r4, 0x0, 0x80000000}) (async, rerun: 64) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r5, r6, 0x0, 0x800000080004105) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000140)={0x38, 0x1, r4, 0x0, 0x20, 0x81}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r2}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000240)={0x28, 0x0, r8, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r8, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r9, 0xffffffffffffff54, 0xb3}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r11 = getpid() (rerun: 64) sched_setscheduler(r11, 0x1, &(0x7f0000000240)=0x1) r12 = syz_open_procfs(r11, &(0x7f0000000080)='mountinfo\x00') sendfile(r10, r12, 0x0, 0x800000080004105) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000040)={0xc}) [ 720.036479][T19146] iommufd_mock iommufd_mock1: Adding to iommu group 9 18:05:37 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) [ 720.455204][T19154] overlayfs: missing 'lowerdir' [ 720.581107][T19151] FAULT_INJECTION: forcing a failure. [ 720.581107][T19151] name failslab, interval 1, probability 0, space 0, times 0 [ 720.587169][T19151] CPU: 0 PID: 19151 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 720.591960][T19151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 720.596471][T19151] Call Trace: [ 720.598056][T19151] [ 720.599511][T19151] dump_stack_lvl+0x125/0x1b0 [ 720.601736][T19151] should_fail_ex+0x496/0x5b0 [ 720.603989][T19151] should_failslab+0x9/0x20 [ 720.606195][T19151] __kmem_cache_alloc_node+0x5f/0x470 [ 720.608738][T19151] ? tomoyo_realpath_from_path+0xb9/0x710 [ 720.611426][T19151] __kmalloc+0x4f/0x100 [ 720.613444][T19151] tomoyo_realpath_from_path+0xb9/0x710 [ 720.616046][T19151] ? tomoyo_profile+0x47/0x60 [ 720.618291][T19151] tomoyo_path_perm+0x26f/0x450 [ 720.620615][T19151] ? tomoyo_path_perm+0x25b/0x450 [ 720.622965][T19151] ? tomoyo_check_open_permission+0x3b0/0x3b0 [ 720.625845][T19151] ? avc_has_perm+0x11b/0x1c0 [ 720.628075][T19151] ? make_vfsgid+0x108/0x160 [ 720.630218][T19151] ? from_vfsuid+0x170/0x170 [ 720.632245][T19151] ? ext4_getattr+0x335/0x770 [ 720.634513][T19151] ? ext4_file_getattr+0x257/0x380 [ 720.636947][T19151] security_inode_getattr+0xf1/0x150 [ 720.639497][T19151] vfs_getattr+0x25/0x60 [ 720.641522][T19151] ovl_getattr+0x28f/0xf70 [ 720.643659][T19151] ? ovl_inode_set+0x50/0x50 [ 720.645853][T19151] ? ext4_xattr_get+0x18b/0x780 [ 720.648108][T19151] ? ext4_xattr_security_set+0x50/0x50 [ 720.650665][T19151] ? __vfs_getxattr+0x143/0x1a0 [ 720.653000][T19151] ? xattr_full_name+0x90/0x90 [ 720.655270][T19151] ? ovl_inode_set+0x50/0x50 [ 720.657462][T19151] vfs_getattr_nosec+0x290/0x380 [ 720.659812][T19151] ima_collect_measurement+0x225/0x6f0 [ 720.662305][T19151] ? ima_get_action+0xa0/0xa0 [ 720.664553][T19151] ? revert_creds+0x1ce/0x250 [ 720.666801][T19151] ? vfs_getxattr_alloc+0xf1/0x340 [ 720.669260][T19151] ? ima_get_cache_status+0x1c0/0x1c0 [ 720.671783][T19151] process_measurement+0xc87/0x1cc0 [ 720.674268][T19151] ? mmap_violation_check+0x1f0/0x1f0 [ 720.676826][T19151] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 720.679844][T19151] ? selinux_inode_create+0x30/0x30 [ 720.682339][T19151] ? ovl_open+0xfc/0x330 [ 720.684389][T19151] ? ovl_llseek+0x380/0x380 [ 720.686553][T19151] ima_file_check+0xc2/0x110 [ 720.688742][T19151] ? process_measurement+0x1cc0/0x1cc0 [ 720.691312][T19151] ? ovl_llseek+0x380/0x380 [ 720.693504][T19151] ? may_open+0x1f2/0x400 [ 720.695539][T19151] path_openat+0x17a1/0x29c0 [ 720.697761][T19151] ? path_lookupat+0x770/0x770 [ 720.700034][T19151] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 720.702862][T19151] do_filp_open+0x1de/0x430 [ 720.705020][T19151] ? may_open_dev+0xf0/0xf0 [ 720.707152][T19151] ? find_held_lock+0x2d/0x110 [ 720.709410][T19151] ? _raw_spin_unlock+0x28/0x40 [ 720.711634][T19151] ? alloc_fd+0x2da/0x6c0 [ 720.713658][T19151] do_sys_openat2+0x176/0x1e0 [ 720.715891][T19151] ? build_open_flags+0x690/0x690 [ 720.718261][T19151] __x64_sys_open+0x154/0x1e0 [ 720.720285][T19151] ? do_sys_open+0x160/0x160 [ 720.722447][T19151] ? syscall_enter_from_user_mode+0x26/0x80 [ 720.725287][T19151] ? lockdep_hardirqs_on+0x7d/0x100 [ 720.727754][T19151] do_syscall_64+0x38/0xb0 [ 720.729887][T19151] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 720.732695][T19151] RIP: 0033:0x7f4ec1c7cae9 [ 720.734806][T19151] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 720.743616][T19151] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 720.747491][T19151] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 720.751040][T19151] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 720.754744][T19151] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 720.758466][T19151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 720.762208][T19151] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 720.765858][T19151] [ 720.773209][T19151] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:37 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 38) 18:05:37 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0xffffffff}) 18:05:37 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000100)={0xb9, 0x5, 0xffffffffffffffff, 0x0, "f1dfd170f0d2906d332ec9f9ca1d15fd65b0b7dfff2acb4f2363b308b13973822b75a52e4aefb791193b00ce17c2a4a24023b68699ff66cefd5e7c9fed307a9f47e5aef0e8ebbcd148f7d39b49326149c100c14bbaecdf661422815dbf62f763ed10adea8c873a0907f456b5faaa14cfaa7ed33aa0e698e0ae034fd3eee6d7844c6f796f94d6ee4bfb66a5411a3ac2319b79d47c42b17b0e914f27d9a84189be7e"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) 18:05:37 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:37 executing program 0: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) read$alg(r0, &(0x7f00000000c0)=""/148, 0x94) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x69e3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f0000000100), 0x4) statx(r1, &(0x7f0000000200)='./file0\x00', 0x100, 0x200, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, r5}}, './file0\x00'}) sendfile(r1, r4, &(0x7f0000000380), 0x8000000000000000) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000001c0)={0x6581, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r6, 0x20, 0x0, @void}, 0x10) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$nl_route(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_getaddr={0x7c, 0x16, 0x10, 0x70bd29, 0x25dfdbff, {0x2, 0x1, 0xc, 0xfd}, [@IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x15}}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x1, 0xbd, 0x5}}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_LABEL={0x14, 0x3, 'batadv_slave_0\x00'}, @IFA_LABEL={0x14, 0x3, 'wlan0\x00'}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20004881) 18:05:37 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000100)={0xb9, 0x5, 0xffffffffffffffff, 0x0, "f1dfd170f0d2906d332ec9f9ca1d15fd65b0b7dfff2acb4f2363b308b13973822b75a52e4aefb791193b00ce17c2a4a24023b68699ff66cefd5e7c9fed307a9f47e5aef0e8ebbcd148f7d39b49326149c100c14bbaecdf661422815dbf62f763ed10adea8c873a0907f456b5faaa14cfaa7ed33aa0e698e0ae034fd3eee6d7844c6f796f94d6ee4bfb66a5411a3ac2319b79d47c42b17b0e914f27d9a84189be7e"}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) 18:05:37 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000100)={0xb9, 0x5, 0xffffffffffffffff, 0x0, "f1dfd170f0d2906d332ec9f9ca1d15fd65b0b7dfff2acb4f2363b308b13973822b75a52e4aefb791193b00ce17c2a4a24023b68699ff66cefd5e7c9fed307a9f47e5aef0e8ebbcd148f7d39b49326149c100c14bbaecdf661422815dbf62f763ed10adea8c873a0907f456b5faaa14cfaa7ed33aa0e698e0ae034fd3eee6d7844c6f796f94d6ee4bfb66a5411a3ac2319b79d47c42b17b0e914f27d9a84189be7e"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000200)={0x38, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) 18:05:37 executing program 0: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) read$alg(r0, &(0x7f00000000c0)=""/148, 0x94) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x69e3) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f0000000100), 0x4) statx(r1, &(0x7f0000000200)='./file0\x00', 0x100, 0x200, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, r5}}, './file0\x00'}) sendfile(r1, r4, &(0x7f0000000380), 0x8000000000000000) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000001c0)={0x6581, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r6, 0x20, 0x0, @void}, 0x10) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$nl_route(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_getaddr={0x7c, 0x16, 0x10, 0x70bd29, 0x25dfdbff, {0x2, 0x1, 0xc, 0xfd}, [@IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x15}}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x1, 0xbd, 0x5}}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_LABEL={0x14, 0x3, 'batadv_slave_0\x00'}, @IFA_LABEL={0x14, 0x3, 'wlan0\x00'}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20004881) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) read$alg(r0, &(0x7f00000000c0)=""/148, 0x94) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x69e3) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (async) sendfile(r2, r3, 0x0, 0x800000080004105) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) setsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f0000000100), 0x4) (async) statx(r1, &(0x7f0000000200)='./file0\x00', 0x100, 0x200, &(0x7f0000000240)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, r5}}, './file0\x00'}) (async) sendfile(r1, r4, &(0x7f0000000380), 0x8000000000000000) (async) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000001c0)={0x6581, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r6, 0x20, 0x0, @void}, 0x10) (async) socket(0x10, 0x2, 0x0) (async) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) sendmsg$nl_route(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_getaddr={0x7c, 0x16, 0x10, 0x70bd29, 0x25dfdbff, {0x2, 0x1, 0xc, 0xfd}, [@IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x15}}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x1, 0xbd, 0x5}}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_LABEL={0x14, 0x3, 'batadv_slave_0\x00'}, @IFA_LABEL={0x14, 0x3, 'wlan0\x00'}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20004881) (async) [ 720.992386][T19170] overlayfs: missing 'lowerdir' [ 721.614955][T19178] FAULT_INJECTION: forcing a failure. [ 721.614955][T19178] name failslab, interval 1, probability 0, space 0, times 0 [ 721.619263][T19178] CPU: 2 PID: 19178 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 721.622843][T19178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 721.626322][T19178] Call Trace: [ 721.627503][T19178] [ 721.628557][T19178] dump_stack_lvl+0x125/0x1b0 [ 721.630230][T19178] should_fail_ex+0x496/0x5b0 [ 721.631855][T19178] should_failslab+0x9/0x20 [ 721.633435][T19178] __kmem_cache_alloc_node+0x5f/0x470 [ 721.635379][T19178] ? tomoyo_encode2+0x100/0x3d0 [ 721.637487][T19178] __kmalloc+0x4f/0x100 [ 721.639106][T19178] tomoyo_encode2+0x100/0x3d0 [ 721.640827][T19178] ? rcu_is_watching+0x12/0xb0 [ 721.642535][T19178] tomoyo_encode+0x29/0x50 [ 721.644144][T19178] tomoyo_realpath_from_path+0x196/0x710 [ 721.646097][T19178] ? tomoyo_profile+0x47/0x60 [ 721.647715][T19178] tomoyo_path_perm+0x26f/0x450 [ 721.649446][T19178] ? tomoyo_path_perm+0x25b/0x450 [ 721.651247][T19178] ? tomoyo_check_open_permission+0x3b0/0x3b0 [ 721.653364][T19178] ? avc_has_perm+0x11b/0x1c0 [ 721.655042][T19178] ? make_vfsgid+0x108/0x160 [ 721.656990][T19178] ? from_vfsuid+0x170/0x170 [ 721.658917][T19178] ? ext4_getattr+0x335/0x770 [ 721.660900][T19178] ? ext4_file_getattr+0x257/0x380 [ 721.662750][T19178] security_inode_getattr+0xf1/0x150 [ 721.664577][T19178] vfs_getattr+0x25/0x60 [ 721.666059][T19178] ovl_getattr+0x28f/0xf70 [ 721.667594][T19178] ? ovl_inode_set+0x50/0x50 [ 721.669243][T19178] ? ext4_xattr_get+0x18b/0x780 [ 721.670971][T19178] ? ext4_xattr_security_set+0x50/0x50 [ 721.672887][T19178] ? __vfs_getxattr+0x143/0x1a0 [ 721.674587][T19178] ? xattr_full_name+0x90/0x90 [ 721.676265][T19178] ? ovl_inode_set+0x50/0x50 [ 721.677862][T19178] vfs_getattr_nosec+0x290/0x380 [ 721.679582][T19178] ima_collect_measurement+0x225/0x6f0 [ 721.681462][T19178] ? ima_get_action+0xa0/0xa0 [ 721.683074][T19178] ? revert_creds+0x1ce/0x250 [ 721.684702][T19178] ? vfs_getxattr_alloc+0xf1/0x340 [ 721.686561][T19178] ? ima_get_cache_status+0x1c0/0x1c0 [ 721.688468][T19178] process_measurement+0xc87/0x1cc0 [ 721.690710][T19178] ? mmap_violation_check+0x1f0/0x1f0 [ 721.692706][T19178] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 721.694982][T19178] ? selinux_inode_create+0x30/0x30 [ 721.696864][T19178] ? ovl_open+0xfc/0x330 [ 721.698629][T19178] ? ovl_llseek+0x380/0x380 [ 721.700452][T19178] ima_file_check+0xc2/0x110 [ 721.702044][T19178] ? process_measurement+0x1cc0/0x1cc0 [ 721.703910][T19178] ? ovl_llseek+0x380/0x380 [ 721.705499][T19178] ? may_open+0x1f2/0x400 [ 721.707090][T19178] path_openat+0x17a1/0x29c0 [ 721.709165][T19178] ? path_lookupat+0x770/0x770 [ 721.711258][T19178] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 721.713829][T19178] do_filp_open+0x1de/0x430 [ 721.715810][T19178] ? may_open_dev+0xf0/0xf0 [ 721.717804][T19178] ? find_held_lock+0x2d/0x110 [ 721.719895][T19178] ? _raw_spin_unlock+0x28/0x40 [ 721.721955][T19178] ? alloc_fd+0x2da/0x6c0 [ 721.723885][T19178] do_sys_openat2+0x176/0x1e0 [ 721.725881][T19178] ? build_open_flags+0x690/0x690 [ 721.728133][T19178] __x64_sys_open+0x154/0x1e0 [ 721.730196][T19178] ? do_sys_open+0x160/0x160 [ 721.732286][T19178] ? syscall_enter_from_user_mode+0x26/0x80 [ 721.734900][T19178] ? lockdep_hardirqs_on+0x7d/0x100 [ 721.737216][T19178] do_syscall_64+0x38/0xb0 [ 721.739200][T19178] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 721.741823][T19178] RIP: 0033:0x7f4ec1c7cae9 [ 721.743795][T19178] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 721.752165][T19178] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 721.755819][T19178] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 721.759273][T19178] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 721.762702][T19178] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 721.766061][T19178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 721.769514][T19178] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 721.773015][T19178] [ 721.779223][T19178] ERROR: Out of memory at tomoyo_realpath_from_path. 18:05:38 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 39) 18:05:38 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000100)={0x18, r1, 0xffffffffffffff58, 0x400000800000b3}) 18:05:38 executing program 0: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) read$alg(r0, &(0x7f00000000c0)=""/148, 0x94) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x69e3) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r2, r3, 0x0, 0x800000080004105) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f0000000100), 0x4) (async, rerun: 32) statx(r1, &(0x7f0000000200)='./file0\x00', 0x100, 0x200, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0xffffffffffffffff, r5}}, './file0\x00'}) sendfile(r1, r4, &(0x7f0000000380), 0x8000000000000000) r7 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f00000001c0)={0x6581, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async, rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r6, 0x20, 0x0, @void}, 0x10) (async, rerun: 32) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async, rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_getaddr={0x7c, 0x16, 0x10, 0x70bd29, 0x25dfdbff, {0x2, 0x1, 0xc, 0xfd}, [@IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x15}}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x1, 0xbd, 0x5}}, @IFA_LOCAL={0x8, 0x2, @private=0xa010101}, @IFA_LABEL={0x14, 0x3, 'batadv_slave_0\x00'}, @IFA_LABEL={0x14, 0x3, 'wlan0\x00'}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_ADDRESS={0x8, 0x1, @local}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20004881) (rerun: 64) 18:05:38 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:38 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) (async) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000100)={0x18, r1, 0xffffffffffffff58, 0x400000800000b3}) 18:05:38 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x80000001, 0x2, 0x2, 0x0, 0x20}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x785, 0x3, 0x4, 0x0, 0x1f}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 721.900083][T19188] overlay: Unknown parameter 'workdi' 18:05:38 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) (async) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(0xffffffffffffffff, 0x3b86, &(0x7f0000000100)={0x18, r1, 0xffffffffffffff58, 0x400000800000b3}) 18:05:38 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x80000001, 0x2, 0x2, 0x0, 0x20}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x785, 0x3, 0x4, 0x0, 0x1f}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x80000001, 0x2, 0x2, 0x0, 0x20}) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) (async) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x785, 0x3, 0x4, 0x0, 0x1f}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) [ 722.503489][T19204] FAULT_INJECTION: forcing a failure. [ 722.503489][T19204] name failslab, interval 1, probability 0, space 0, times 0 [ 722.508617][T19204] CPU: 2 PID: 19204 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 722.513165][T19204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 722.516847][T19204] Call Trace: [ 722.518090][T19204] [ 722.519224][T19204] dump_stack_lvl+0x125/0x1b0 [ 722.521036][T19204] should_fail_ex+0x496/0x5b0 [ 722.522777][T19204] should_failslab+0x9/0x20 [ 722.524904][T19204] __kmem_cache_alloc_node+0x5f/0x470 [ 722.527481][T19204] ? snprintf+0x100/0x100 [ 722.529479][T19204] ? ima_write_template_field_data+0x59/0x1e0 [ 722.532265][T19204] __kmalloc+0x4f/0x100 [ 722.534020][T19204] ima_write_template_field_data+0x59/0x1e0 [ 722.536258][T19204] ima_eventdigest_init_common+0x16a/0x3c0 [ 722.538186][T19204] ? ima_write_template_field_data+0x1e0/0x1e0 [ 722.540631][T19204] ? kasan_set_track+0x25/0x30 [ 722.542740][T19204] ? rcu_is_watching+0x12/0xb0 [ 722.544808][T19204] ima_alloc_init_template+0x396/0x720 [ 722.546810][T19204] ima_store_measurement+0x1f0/0x5d0 [ 722.548864][T19204] ? ima_collect_measurement+0x6f0/0x6f0 [ 722.550904][T19204] ? d_absolute_path+0x137/0x1a0 [ 722.552707][T19204] process_measurement+0x1759/0x1cc0 [ 722.554612][T19204] ? mmap_violation_check+0x1f0/0x1f0 [ 722.556570][T19204] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 722.559064][T19204] ? selinux_inode_create+0x30/0x30 [ 722.560993][T19204] ? ovl_open+0xfc/0x330 [ 722.562550][T19204] ? ovl_llseek+0x380/0x380 [ 722.564293][T19204] ima_file_check+0xc2/0x110 [ 722.566037][T19204] ? process_measurement+0x1cc0/0x1cc0 [ 722.568051][T19204] ? ovl_llseek+0x380/0x380 [ 722.569870][T19204] ? may_open+0x1f2/0x400 [ 722.571863][T19204] path_openat+0x17a1/0x29c0 [ 722.574011][T19204] ? path_lookupat+0x770/0x770 [ 722.576210][T19204] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 722.578767][T19204] do_filp_open+0x1de/0x430 [ 722.580513][T19204] ? may_open_dev+0xf0/0xf0 [ 722.582173][T19204] ? find_held_lock+0x2d/0x110 [ 722.583944][T19204] ? _raw_spin_unlock+0x28/0x40 [ 722.586108][T19204] ? alloc_fd+0x2da/0x6c0 [ 722.588140][T19204] do_sys_openat2+0x176/0x1e0 [ 722.590348][T19204] ? build_open_flags+0x690/0x690 [ 722.592635][T19204] __x64_sys_open+0x154/0x1e0 [ 722.594813][T19204] ? do_sys_open+0x160/0x160 [ 722.596995][T19204] ? syscall_enter_from_user_mode+0x26/0x80 [ 722.599728][T19204] ? lockdep_hardirqs_on+0x7d/0x100 [ 722.602042][T19204] do_syscall_64+0x38/0xb0 [ 722.603672][T19204] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 722.605823][T19204] RIP: 0033:0x7f4ec1c7cae9 [ 722.607416][T19204] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 722.614343][T19204] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 722.617459][T19204] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 722.620347][T19204] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 722.623220][T19204] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 722.626075][T19204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 722.628958][T19204] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 722.631821][T19204] [ 722.635028][ T37] audit: type=1804 audit(1695578739.639:561): pid=19204 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=add_template_measure cause=ENOMEM comm="syz-executor.1" name="/syzkaller-testdir2404318525/syzkaller.x9zgeo/124/bus/file0" dev="overlay" ino=1967 res=0 errno=0 18:05:39 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 40) 18:05:39 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) pread64(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x9f) 18:05:39 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x80000001, 0x2, 0x2, 0x0, 0x20}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x785, 0x3, 0x4, 0x0, 0x1f}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0x80000001, 0x2, 0x2, 0x0, 0x20}) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) (async) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r2) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x785, 0x3, 0x4, 0x0, 0x1f}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) 18:05:39 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:39 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x40000004, 0x1, 0x2, "1111c9fc6df5d10002000060823c4ce940bbb2d19b0301000000ab00", 0x38303553}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x45, 0x1, 0x3, 0x0, 0xf3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 18:05:39 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) pread64(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x9f) 18:05:39 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x40000004, 0x1, 0x2, "1111c9fc6df5d10002000060823c4ce940bbb2d19b0301000000ab00", 0x38303553}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x45, 0x1, 0x3, 0x0, 0xf3}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 18:05:39 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) pread64(r0, &(0x7f0000000100)=""/4096, 0x1000, 0x9f) [ 722.733921][T19217] overlay: Unknown parameter 'workdi' 18:05:40 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 41) 18:05:40 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x40000004, 0x1, 0x2, "1111c9fc6df5d10002000060823c4ce940bbb2d19b0301000000ab00", 0x38303553}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x45, 0x1, 0x3, 0x0, 0xf3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x40000004, 0x1, 0x2, "1111c9fc6df5d10002000060823c4ce940bbb2d19b0301000000ab00", 0x38303553}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x45, 0x1, 0x3, 0x0, 0xf3}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) (async) 18:05:40 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x8, r0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r2, 0xffffffffffffff54, 0xb3}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) 18:05:40 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdi']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:40 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6d) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@multiplanar_userptr={0x80000000, 0x2, 0x4, 0x400, 0x20, {r2, r3/1000+60000}, {0x4, 0x8, 0x3f, 0x6, 0x7, 0x56, "7ed02ac8"}, 0x8001, 0x2, {&(0x7f00000000c0)=[{0x101, 0x8001, {0xffffffffffffffff}, 0x1}, {0xffff6e96, 0x5, {&(0x7f0000000080)}, 0x35}]}, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) clock_getres(0x6, &(0x7f0000000140)) 18:05:40 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x8, r0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r2, 0xffffffffffffff54, 0xb3}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x8, r0}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r2, 0xffffffffffffff54, 0xb3}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) (async) 18:05:40 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6d) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@multiplanar_userptr={0x80000000, 0x2, 0x4, 0x400, 0x20, {r2, r3/1000+60000}, {0x4, 0x8, 0x3f, 0x6, 0x7, 0x56, "7ed02ac8"}, 0x8001, 0x2, {&(0x7f00000000c0)=[{0x101, 0x8001, {0xffffffffffffffff}, 0x1}, {0xffff6e96, 0x5, {&(0x7f0000000080)}, 0x35}]}, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) clock_getres(0x6, &(0x7f0000000140)) 18:05:40 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x8, r0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r2, 0xffffffffffffff54, 0xb3}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc}) [ 723.556438][T19244] overlay: Unknown parameter 'workdi' [ 724.146039][T19250] FAULT_INJECTION: forcing a failure. [ 724.146039][T19250] name failslab, interval 1, probability 0, space 0, times 0 [ 724.151805][T19250] CPU: 3 PID: 19250 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 724.156678][T19250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 724.161364][T19250] Call Trace: [ 724.162968][T19250] [ 724.164393][T19250] dump_stack_lvl+0x125/0x1b0 [ 724.166640][T19250] should_fail_ex+0x496/0x5b0 [ 724.168883][T19250] should_failslab+0x9/0x20 [ 724.171050][T19250] __kmem_cache_alloc_node+0x5f/0x470 [ 724.173632][T19250] ? ima_write_template_field_data+0x59/0x1e0 [ 724.176511][T19250] __kmalloc+0x4f/0x100 [ 724.178490][T19250] ima_write_template_field_data+0x59/0x1e0 [ 724.181274][T19250] ima_alloc_init_template+0x396/0x720 [ 724.183851][T19250] ima_store_measurement+0x1f0/0x5d0 [ 724.186354][T19250] ? ima_collect_measurement+0x6f0/0x6f0 [ 724.189009][T19250] ? d_absolute_path+0x137/0x1a0 [ 724.191346][T19250] process_measurement+0x1759/0x1cc0 [ 724.193861][T19250] ? mmap_violation_check+0x1f0/0x1f0 [ 724.196357][T19250] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 724.199487][T19250] ? selinux_inode_create+0x30/0x30 [ 724.201907][T19250] ? ovl_open+0xfc/0x330 [ 724.203879][T19250] ? ovl_llseek+0x380/0x380 [ 724.206026][T19250] ima_file_check+0xc2/0x110 [ 724.208249][T19250] ? process_measurement+0x1cc0/0x1cc0 [ 724.210289][T19250] ? ovl_llseek+0x380/0x380 [ 724.211984][T19250] ? may_open+0x1f2/0x400 [ 724.213654][T19250] path_openat+0x17a1/0x29c0 [ 724.215380][T19250] ? path_lookupat+0x770/0x770 [ 724.217278][T19250] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 724.219562][T19250] do_filp_open+0x1de/0x430 [ 724.221318][T19250] ? may_open_dev+0xf0/0xf0 [ 724.223092][T19250] ? find_held_lock+0x2d/0x110 [ 724.224960][T19250] ? _raw_spin_unlock+0x28/0x40 [ 724.226813][T19250] ? alloc_fd+0x2da/0x6c0 [ 724.228488][T19250] do_sys_openat2+0x176/0x1e0 [ 724.230474][T19250] ? build_open_flags+0x690/0x690 [ 724.232746][T19250] __x64_sys_open+0x154/0x1e0 [ 724.234531][T19250] ? do_sys_open+0x160/0x160 [ 724.236606][T19250] ? syscall_enter_from_user_mode+0x26/0x80 [ 724.239237][T19250] ? lockdep_hardirqs_on+0x7d/0x100 [ 724.241554][T19250] do_syscall_64+0x38/0xb0 [ 724.243532][T19250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 724.246164][T19250] RIP: 0033:0x7f4ec1c7cae9 [ 724.248135][T19250] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 724.256666][T19250] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 724.260342][T19250] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 724.263824][T19250] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000200002c0 [ 724.267325][T19250] RBP: 00007f4ec2a66120 R08: 0000000000000000 R09: 0000000000000000 [ 724.270836][T19250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 724.274164][T19250] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 724.277723][T19250] [ 724.284440][ T37] audit: type=1804 audit(1695578741.289:562): pid=19250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=add_template_measure cause=ENOMEM comm="syz-executor.1" name="/syzkaller-testdir2404318525/syzkaller.x9zgeo/126/bus/file0" dev="overlay" ino=1966 res=0 errno=0 18:05:41 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) (fail_nth: 42) 18:05:41 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x1, r1, 0x0, 0x0, 0xfffffffffffffffe}) 18:05:41 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:41 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6d) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 64) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@multiplanar_userptr={0x80000000, 0x2, 0x4, 0x400, 0x20, {r2, r3/1000+60000}, {0x4, 0x8, 0x3f, 0x6, 0x7, 0x56, "7ed02ac8"}, 0x8001, 0x2, {&(0x7f00000000c0)=[{0x101, 0x8001, {0xffffffffffffffff}, 0x1}, {0xffff6e96, 0x5, {&(0x7f0000000080)}, 0x35}]}, 0x2}) (async, rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (rerun: 64) clock_getres(0x6, &(0x7f0000000140)) 18:05:41 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x1, r1, 0x0, 0x0, 0xfffffffffffffffe}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x1, r1, 0x0, 0x0, 0xfffffffffffffffe}) (async) 18:05:41 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "1111dc2128dc4ce580c9fc68f7d1e60d892460823d0c09008b72d19be900", 0x20385655}) 18:05:41 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x1, r1, 0x0, 0x0, 0xfffffffffffffffe}) [ 724.387947][T19266] overlayfs: missing 'lowerdir' 18:05:41 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "1111dc2128dc4ce580c9fc68f7d1e60d892460823d0c09008b72d19be900", 0x20385655}) 18:05:42 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:42 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "1111dc2128dc4ce580c9fc68f7d1e60d892460823d0c09008b72d19be900", 0x20385655}) 18:05:42 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:42 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r4, 0x0, 0x3}) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1000, 0x600800) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000240)={0x38, 0x1, r7, 0x0, 0xfffffffffffffffd, 0x8}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000080)={0x38, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r6, 0x3b80, &(0x7f0000000200)={0xd, r8}) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, &(0x7f00000001c0)={0x8, r8}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r10, 0x0, 0x80000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r10, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7}) [ 725.118009][T19279] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 725.128429][T19279] iommufd_mock iommufd_mock2: Adding to iommu group 10 [ 725.160678][T19283] overlayfs: missing 'lowerdir' 18:05:42 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000100), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="483663eed1b48348c56b8c3af9b52b3c5981587449a93c197e75755905a2e26ce5cf96de60a39183471029b178556305e745afd57a2c90bed3920b81e8a64a505c0597ba975584eb25c06d72a45690e89cc7329eb22c3765901fb7118664ff68349f96235be7f8d10abc25d1367ec3af8ed6ed3f9153c0d7d5e5a216d5e801a2e24851f311aa3d77a71b20ac41eb532cce2301089f0a25e147ca04066b6b747b90708c0b4e81a88902723225a9992c6e1c2c3e682517bc65e68a6fc3f94861dcadbe7f7e3825cbf4d4104f17c86ac001a34af974e08204c22dcff0e10492d90c", 0xe0, r1}, 0x68) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000840)={0x4, 0x0, [{0x1, 0x29, &(0x7f0000000300)=""/41}, {0x1, 0x91, &(0x7f0000000340)=""/145}, {0xd000, 0x5b, &(0x7f0000000400)=""/91}, {0x0, 0x0, 0x0}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000900)={{r2}, r4, 0x8, @unused=[0x7f, 0x5, 0x10002, 0x100000000], @subvolid=0x81}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7a150089a2cdddc4e2e3ef2dcfb3e58c", 0x0, r4, {0x4, 0x6ce}, {0x4, 0x1}, 0x0, [0x800, 0x80000000, 0xff, 0x557f, 0x5, 0x2020000000000000, 0x100, 0x100, 0x925f, 0x5, 0x9, 0x400, 0x1, 0x1000, 0x1, 0x9]}) r5 = syz_io_uring_complete(0x0) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000200)={0x3, @null}) 18:05:42 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r4, 0x0, 0x3}) (async) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1000, 0x600800) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000240)={0x38, 0x1, r7, 0x0, 0xfffffffffffffffd, 0x8}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r7}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000080)={0x38, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r6, 0x3b80, &(0x7f0000000200)={0xd, r8}) (async) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, &(0x7f00000001c0)={0x8, r8}) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r10, 0x0, 0x80000000}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r10, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7}) [ 725.189856][T19288] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 725.195993][T19289] iommufd_mock iommufd_mock2: Adding to iommu group 10 18:05:42 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r4, 0x0, 0x3}) syz_open_dev$vcsu(&(0x7f0000000140), 0x1000, 0x600800) (async) r5 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1000, 0x600800) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000240)={0x38, 0x1, r7, 0x0, 0xfffffffffffffffd, 0x8}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000040)={0x38, 0x2, r7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000080)={0x38, 0x2, r7}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000080)={0x38, 0x2, r7, 0x0, 0x0}) ioctl$IOMMU_DESTROY$device(r6, 0x3b80, &(0x7f0000000200)={0xd, r8}) ioctl$IOMMU_DESTROY$device(r5, 0x3b80, &(0x7f00000001c0)={0x8, r8}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r10, 0x0, 0x80000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r10, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r10, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x7}) 18:05:42 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000100), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="483663eed1b48348c56b8c3af9b52b3c5981587449a93c197e75755905a2e26ce5cf96de60a39183471029b178556305e745afd57a2c90bed3920b81e8a64a505c0597ba975584eb25c06d72a45690e89cc7329eb22c3765901fb7118664ff68349f96235be7f8d10abc25d1367ec3af8ed6ed3f9153c0d7d5e5a216d5e801a2e24851f311aa3d77a71b20ac41eb532cce2301089f0a25e147ca04066b6b747b90708c0b4e81a88902723225a9992c6e1c2c3e682517bc65e68a6fc3f94861dcadbe7f7e3825cbf4d4104f17c86ac001a34af974e08204c22dcff0e10492d90c", 0xe0, r1}, 0x68) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000840)={0x4, 0x0, [{0x1, 0x29, &(0x7f0000000300)=""/41}, {0x1, 0x91, &(0x7f0000000340)=""/145}, {0xd000, 0x5b, &(0x7f0000000400)=""/91}, {0x0, 0x0, 0x0}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000900)={{r2}, r4, 0x8, @unused=[0x7f, 0x5, 0x10002, 0x100000000], @subvolid=0x81}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7a150089a2cdddc4e2e3ef2dcfb3e58c", 0x0, r4, {0x4, 0x6ce}, {0x4, 0x1}, 0x0, [0x800, 0x80000000, 0xff, 0x557f, 0x5, 0x2020000000000000, 0x100, 0x100, 0x925f, 0x5, 0x9, 0x400, 0x1, 0x1000, 0x1, 0x9]}) r5 = syz_io_uring_complete(0x0) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000200)={0x3, @null}) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xca) (async) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000100), 0x4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="483663eed1b48348c56b8c3af9b52b3c5981587449a93c197e75755905a2e26ce5cf96de60a39183471029b178556305e745afd57a2c90bed3920b81e8a64a505c0597ba975584eb25c06d72a45690e89cc7329eb22c3765901fb7118664ff68349f96235be7f8d10abc25d1367ec3af8ed6ed3f9153c0d7d5e5a216d5e801a2e24851f311aa3d77a71b20ac41eb532cce2301089f0a25e147ca04066b6b747b90708c0b4e81a88902723225a9992c6e1c2c3e682517bc65e68a6fc3f94861dcadbe7f7e3825cbf4d4104f17c86ac001a34af974e08204c22dcff0e10492d90c", 0xe0, r1}, 0x68) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000840)={0x4, 0x0, [{0x1, 0x29, &(0x7f0000000300)=""/41}, {0x1, 0x91, &(0x7f0000000340)=""/145}, {0xd000, 0x5b, &(0x7f0000000400)=""/91}, {0x0, 0x0, 0x0}]}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000900)={{r2}, r4, 0x8, @unused=[0x7f, 0x5, 0x10002, 0x100000000], @subvolid=0x81}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7a150089a2cdddc4e2e3ef2dcfb3e58c", 0x0, r4, {0x4, 0x6ce}, {0x4, 0x1}, 0x0, [0x800, 0x80000000, 0xff, 0x557f, 0x5, 0x2020000000000000, 0x100, 0x100, 0x925f, 0x5, 0x9, 0x400, 0x1, 0x1000, 0x1, 0x9]}) (async) syz_io_uring_complete(0x0) (async) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000200)={0x3, @null}) (async) [ 725.247098][T19292] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 725.251506][T19292] iommufd_mock iommufd_mock2: Adding to iommu group 10 [ 725.258099][T19293] iommufd_mock iommufd_mock3: Adding to iommu group 11 18:05:42 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0x7ff}) 18:05:42 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000100), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="483663eed1b48348c56b8c3af9b52b3c5981587449a93c197e75755905a2e26ce5cf96de60a39183471029b178556305e745afd57a2c90bed3920b81e8a64a505c0597ba975584eb25c06d72a45690e89cc7329eb22c3765901fb7118664ff68349f96235be7f8d10abc25d1367ec3af8ed6ed3f9153c0d7d5e5a216d5e801a2e24851f311aa3d77a71b20ac41eb532cce2301089f0a25e147ca04066b6b747b90708c0b4e81a88902723225a9992c6e1c2c3e682517bc65e68a6fc3f94861dcadbe7f7e3825cbf4d4104f17c86ac001a34af974e08204c22dcff0e10492d90c", 0xe0, r1}, 0x68) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000840)={0x4, 0x0, [{0x1, 0x29, &(0x7f0000000300)=""/41}, {0x1, 0x91, &(0x7f0000000340)=""/145}, {0xd000, 0x5b, &(0x7f0000000400)=""/91}, {0x0, 0x0, 0x0}]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000900)={{r2}, r4, 0x8, @unused=[0x7f, 0x5, 0x10002, 0x100000000], @subvolid=0x81}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7a150089a2cdddc4e2e3ef2dcfb3e58c", 0x0, r4, {0x4, 0x6ce}, {0x4, 0x1}, 0x0, [0x800, 0x80000000, 0xff, 0x557f, 0x5, 0x2020000000000000, 0x100, 0x100, 0x925f, 0x5, 0x9, 0x400, 0x1, 0x1000, 0x1, 0x9]}) r5 = syz_io_uring_complete(0x0) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000200)={0x3, @null}) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xca) (async) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000100), 0x4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)="483663eed1b48348c56b8c3af9b52b3c5981587449a93c197e75755905a2e26ce5cf96de60a39183471029b178556305e745afd57a2c90bed3920b81e8a64a505c0597ba975584eb25c06d72a45690e89cc7329eb22c3765901fb7118664ff68349f96235be7f8d10abc25d1367ec3af8ed6ed3f9153c0d7d5e5a216d5e801a2e24851f311aa3d77a71b20ac41eb532cce2301089f0a25e147ca04066b6b747b90708c0b4e81a88902723225a9992c6e1c2c3e682517bc65e68a6fc3f94861dcadbe7f7e3825cbf4d4104f17c86ac001a34af974e08204c22dcff0e10492d90c", 0xe0, r1}, 0x68) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000840)={0x4, 0x0, [{0x1, 0x29, &(0x7f0000000300)=""/41}, {0x1, 0x91, &(0x7f0000000340)=""/145}, {0xd000, 0x5b, &(0x7f0000000400)=""/91}, {0x0, 0x0, 0x0}]}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000900)={{r2}, r4, 0x8, @unused=[0x7f, 0x5, 0x10002, 0x100000000], @subvolid=0x81}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7a150089a2cdddc4e2e3ef2dcfb3e58c", 0x0, r4, {0x4, 0x6ce}, {0x4, 0x1}, 0x0, [0x800, 0x80000000, 0xff, 0x557f, 0x5, 0x2020000000000000, 0x100, 0x100, 0x925f, 0x5, 0x9, 0x400, 0x1, 0x1000, 0x1, 0x9]}) (async) syz_io_uring_complete(0x0) (async) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000200)={0x3, @null}) (async) 18:05:42 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:42 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x3, 0x0) 18:05:42 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0x7ff}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0x7ff}) (async) 18:05:42 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x3247504d}) [ 725.928242][T19319] overlayfs: missing 'lowerdir' 18:05:42 executing program 3: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0x7ff}) 18:05:42 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x3247504d}) 18:05:42 executing program 3: recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000, 0x10001, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:42 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x3247504d}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9", 0x3247504d}) [ 726.260503][ T37] audit: type=1804 audit(1695578743.259:563): pid=19334 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2404318525/syzkaller.x9zgeo/129/bus/file0" dev="overlay" ino=1966 res=1 errno=0 [ 726.261517][T19334] [ 726.272269][T19334] ====================================================== [ 726.275166][T19334] WARNING: possible circular locking dependency detected [ 726.277791][T19334] 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 Not tainted [ 726.280308][T19334] ------------------------------------------------------ [ 726.282866][T19334] syz-executor.1/19334 is trying to acquire lock: [ 726.285371][T19334] ffff8881074bc410 (sb_writers#5){.+.+}-{0:0}, at: ovl_maybe_copy_up+0x121/0x180 [ 726.290623][T19334] [ 726.290623][T19334] but task is already holding lock: [ 726.293374][T19334] ffff888017c34500 (&iint->mutex){+.+.}-{3:3}, at: process_measurement+0x893/0x1cc0 [ 726.296880][T19334] [ 726.296880][T19334] which lock already depends on the new lock. [ 726.296880][T19334] [ 726.301227][T19334] [ 726.301227][T19334] the existing dependency chain (in reverse order) is: [ 726.304518][T19334] [ 726.304518][T19334] -> #1 (&iint->mutex){+.+.}-{3:3}: [ 726.307440][T19334] __mutex_lock+0x181/0x1340 [ 726.309527][T19334] process_measurement+0x893/0x1cc0 [ 726.311609][T19334] ima_file_check+0xc2/0x110 [ 726.313502][T19334] path_openat+0x17a1/0x29c0 [ 726.315409][T19334] do_filp_open+0x1de/0x430 [ 726.317491][T19334] do_sys_openat2+0x176/0x1e0 [ 726.319839][T19334] __x64_sys_openat+0x175/0x210 [ 726.321827][T19334] do_syscall_64+0x38/0xb0 [ 726.323650][T19334] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 726.326003][T19334] [ 726.326003][T19334] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 726.328731][T19334] __lock_acquire+0x2e3d/0x5de0 [ 726.330697][T19334] lock_acquire+0x1ae/0x510 [ 726.332574][T19334] mnt_want_write+0x6f/0x440 [ 726.334463][T19334] ovl_maybe_copy_up+0x121/0x180 [ 726.336472][T19334] ovl_open+0x16f/0x330 [ 726.338703][T19334] do_dentry_open+0x88b/0x1730 [ 726.340764][T19334] dentry_open+0x13f/0x1d0 [ 726.342589][T19334] ima_calc_file_hash+0x2c4/0x4a0 [ 726.344637][T19334] ima_collect_measurement+0x5e2/0x6f0 [ 726.346895][T19334] process_measurement+0xc87/0x1cc0 [ 726.348994][T19334] ima_file_check+0xc2/0x110 [ 726.350879][T19334] path_openat+0x17a1/0x29c0 [ 726.352794][T19334] do_filp_open+0x1de/0x430 [ 726.354642][T19334] do_sys_openat2+0x176/0x1e0 [ 726.356567][T19334] __x64_sys_open+0x154/0x1e0 [ 726.359034][T19334] do_syscall_64+0x38/0xb0 [ 726.360952][T19334] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 726.363310][T19334] [ 726.363310][T19334] other info that might help us debug this: [ 726.363310][T19334] [ 726.367060][T19334] Possible unsafe locking scenario: [ 726.367060][T19334] [ 726.369762][T19334] CPU0 CPU1 [ 726.371717][T19334] ---- ---- [ 726.373704][T19334] lock(&iint->mutex); [ 726.375496][T19334] lock(sb_writers#5); [ 726.378780][T19334] lock(&iint->mutex); [ 726.381929][T19334] rlock(sb_writers#5); [ 726.383481][T19334] [ 726.383481][T19334] *** DEADLOCK *** [ 726.383481][T19334] [ 726.386424][T19334] 1 lock held by syz-executor.1/19334: [ 726.388469][T19334] #0: ffff888017c34500 (&iint->mutex){+.+.}-{3:3}, at: process_measurement+0x893/0x1cc0 [ 726.392045][T19334] [ 726.392045][T19334] stack backtrace: [ 726.394212][T19334] CPU: 3 PID: 19334 Comm: syz-executor.1 Not tainted 6.6.0-rc2-syzkaller-00386-g3aba70aed91f #0 [ 726.398013][T19334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 726.401682][T19334] Call Trace: [ 726.402915][T19334] [ 726.404001][T19334] dump_stack_lvl+0xd9/0x1b0 [ 726.405710][T19334] check_noncircular+0x311/0x3f0 [ 726.407553][T19334] ? print_circular_bug+0x750/0x750 [ 726.409480][T19334] __lock_acquire+0x2e3d/0x5de0 [ 726.411269][T19334] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 726.413482][T19334] ? lockdep_hardirqs_on+0x7d/0x100 [ 726.415390][T19334] lock_acquire+0x1ae/0x510 [ 726.417093][T19334] ? ovl_maybe_copy_up+0x121/0x180 [ 726.418984][T19334] ? lock_sync+0x190/0x190 [ 726.420627][T19334] ? preempt_count_sub+0x150/0x150 [ 726.422503][T19334] ? ovl_path_next+0x3f0/0x3f0 [ 726.424264][T19334] mnt_want_write+0x6f/0x440 [ 726.425970][T19334] ? ovl_maybe_copy_up+0x121/0x180 [ 726.427879][T19334] ovl_maybe_copy_up+0x121/0x180 [ 726.429707][T19334] ovl_open+0x16f/0x330 [ 726.431231][T19334] ? ovl_llseek+0x380/0x380 [ 726.432923][T19334] do_dentry_open+0x88b/0x1730 [ 726.434689][T19334] ? ovl_llseek+0x380/0x380 [ 726.436372][T19334] dentry_open+0x13f/0x1d0 [ 726.438029][T19334] ima_calc_file_hash+0x2c4/0x4a0 [ 726.439876][T19334] ima_collect_measurement+0x5e2/0x6f0 [ 726.441875][T19334] ? ima_get_action+0xa0/0xa0 [ 726.443599][T19334] ? revert_creds+0x1ce/0x250 [ 726.445343][T19334] ? vfs_getxattr_alloc+0xf1/0x340 [ 726.447401][T19334] ? ima_get_cache_status+0x1c0/0x1c0 [ 726.449907][T19334] process_measurement+0xc87/0x1cc0 [ 726.452367][T19334] ? mmap_violation_check+0x1f0/0x1f0 [ 726.454702][T19334] ? __fsnotify_update_child_dentry_flags+0x360/0x360 [ 726.457534][T19334] ? selinux_inode_create+0x30/0x30 [ 726.459448][T19334] ? ovl_open+0xfc/0x330 [ 726.461109][T19334] ? ovl_llseek+0x380/0x380 [ 726.462994][T19334] ima_file_check+0xc2/0x110 [ 726.464715][T19334] ? process_measurement+0x1cc0/0x1cc0 [ 726.466799][T19334] ? ovl_llseek+0x380/0x380 [ 726.468513][T19334] ? may_open+0x1f2/0x400 [ 726.470157][T19334] path_openat+0x17a1/0x29c0 [ 726.471892][T19334] ? path_lookupat+0x770/0x770 [ 726.473729][T19334] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 726.476131][T19334] do_filp_open+0x1de/0x430 [ 726.477920][T19334] ? may_open_dev+0xf0/0xf0 [ 726.479752][T19334] ? find_held_lock+0x2d/0x110 [ 726.481735][T19334] ? _raw_spin_unlock+0x28/0x40 [ 726.483816][T19334] ? alloc_fd+0x2da/0x6c0 [ 726.485431][T19334] do_sys_openat2+0x176/0x1e0 [ 726.487323][T19334] ? build_open_flags+0x690/0x690 [ 726.489204][T19334] __x64_sys_open+0x154/0x1e0 [ 726.490949][T19334] ? do_sys_open+0x160/0x160 [ 726.492672][T19334] ? syscall_enter_from_user_mode+0x26/0x80 [ 726.494845][T19334] ? lockdep_hardirqs_on+0x7d/0x100 [ 726.496806][T19334] do_syscall_64+0x38/0xb0 [ 726.498445][T19334] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 726.500947][T19334] RIP: 0033:0x7f4ec1c7cae9 [ 726.502732][T19334] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 726.510411][T19334] RSP: 002b:00007f4ec2a660c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 726.513480][T19334] RAX: ffffffffffffffda RBX: 00007f4ec1d9c120 RCX: 00007f4ec1c7cae9 [ 726.516438][T19334] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000200002c0 [ 726.519340][T19334] RBP: 00007f4ec1cc847a R08: 0000000000000000 R09: 0000000000000000 [ 726.522232][T19334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.525126][T19334] R13: 000000000000006e R14: 00007f4ec1d9c120 R15: 00007ffe4632a538 [ 726.528100][T19334] 18:05:43 executing program 3: recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000, 0x10001, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:43 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x38303553, 0x5}}) 18:05:43 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x4, 0x0) 18:05:43 executing program 3: recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000, 0x10001, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000, 0x10001, 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) 18:05:43 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:43 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r4, 0x0, 0x3}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000140)={0x38, 0x1, r4, 0x0, 0x4001080000000, 0x3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r6}) 18:05:43 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x38303553, 0x5}}) 18:05:43 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r4, 0x0, 0x3}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000140)={0x38, 0x1, r4, 0x0, 0x4001080000000, 0x3}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r6}) 18:05:43 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x38303553, 0x5}}) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82001, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000040)={0x3, @sdr={0x38303553, 0x5}}) (async) 18:05:43 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r4, 0x0, 0x3}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000140)={0x38, 0x1, r4, 0x0, 0x4001080000000, 0x3}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000140)={0x38, 0x1, r4, 0x0, 0x4001080000000, 0x3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r6}) [ 726.692384][T19361] overlay: Unknown parameter 'lower' [ 726.880311][ T37] audit: type=1804 audit(1695578743.879:564): pid=19365 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2404318525/syzkaller.x9zgeo/130/bus/file0" dev="overlay" ino=1969 res=1 errno=0 [ 727.011942][ T37] audit: type=1804 audit(1695578744.009:565): pid=19364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2404318525/syzkaller.x9zgeo/130/bus/file0" dev="overlay" ino=1969 res=1 errno=0 18:05:44 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x6, 0x0) 18:05:44 executing program 3: ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000100)={0x2, 0x6, 0x8, 0x7, 0x5, 0x81, 0x8, 0x9, 0x81, 0x4, 0xf3, "6a72eb702e346e24890707f1721a1915c82b24ba446f620f2393b16e29fbc383"}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:44 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x222440, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)=@overlay={0x2, 0x2, 0x4, 0x40, 0x2, {0x77359400}, {0x1, 0x2, 0x20, 0x80, 0xb4, 0x20, "3915ad4c"}, 0x2, 0x3, {}, 0x6, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:44 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:44 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) (async, rerun: 32) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x222440, 0x0) (rerun: 32) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)=@overlay={0x2, 0x2, 0x4, 0x40, 0x2, {0x77359400}, {0x1, 0x2, 0x20, 0x80, 0xb4, 0x20, "3915ad4c"}, 0x2, 0x3, {}, 0x6, 0x0, r2}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:44 executing program 3: ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000100)={0x2, 0x6, 0x8, 0x7, 0x5, 0x81, 0x8, 0x9, 0x81, 0x4, 0xf3, "6a72eb702e346e24890707f1721a1915c82b24ba446f620f2393b16e29fbc383"}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000100)={0x2, 0x6, 0x8, 0x7, 0x5, 0x81, 0x8, 0x9, 0x81, 0x4, 0xf3, "6a72eb702e346e24890707f1721a1915c82b24ba446f620f2393b16e29fbc383"}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) 18:05:44 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x222440, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)=@overlay={0x2, 0x2, 0x4, 0x40, 0x2, {0x77359400}, {0x1, 0x2, 0x20, 0x80, 0xb4, 0x20, "3915ad4c"}, 0x2, 0x3, {}, 0x6, 0x0, r2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:44 executing program 3: ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000100)={0x2, 0x6, 0x8, 0x7, 0x5, 0x81, 0x8, 0x9, 0x81, 0x4, 0xf3, "6a72eb702e346e24890707f1721a1915c82b24ba446f620f2393b16e29fbc383"}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000100)={0x2, 0x6, 0x8, 0x7, 0x5, 0x81, 0x8, 0x9, 0x81, 0x4, 0xf3, "6a72eb702e346e24890707f1721a1915c82b24ba446f620f2393b16e29fbc383"}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) [ 727.088352][T19386] overlay: Unknown parameter 'lower' 18:05:44 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x7, 0x0) 18:05:44 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000006c0)={'vxcan0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @random="8aab200b54cb"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettfilter={0x54, 0x2e, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb}, {0x10, 0xa}, {0x9, 0xc}}, [{0x8, 0xb, 0xdc8}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x4f}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x200401e) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x10000, 0x0, {r1, r2/1000+60000}, {0x1, 0x2, 0x1, 0x81, 0x40, 0x9, "ec5036cb"}, 0x100, 0x3, {&(0x7f0000000080)=[{0x5, 0x20, {0xb6}, 0x2ce}, {0x0, 0x1ff, {}, 0xfff}]}, 0x9, 0x0, r4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x6, 0x8) 18:05:44 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0xd, &(0x7f0000002380)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2c3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x3, 0x6, 0x8, 0x2, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0xbc, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x9, 0x80000001, 0x5}, 0x10, 0x1f732, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1000}, 0x90) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000002c0)={{0x0, 0x7fffffffffffffff, 0x434, 0x9, 0x3, 0x8, 0x3, 0x6, 0x3f, 0x9b, 0x5, 0x6d3, 0xfffffffffffff0b2, 0xe54, 0x9}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000012c0)={0x0, r3, "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", "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"}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000022c0), 0x1, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000002300)={0x38, 0x1, r1, 0x0, 0x0, 0x401}) 18:05:44 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:44 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0xd, &(0x7f0000002380)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2c3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x3, 0x6, 0x8, 0x2, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0xbc, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x9, 0x80000001, 0x5}, 0x10, 0x1f732, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1000}, 0x90) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000002c0)={{0x0, 0x7fffffffffffffff, 0x434, 0x9, 0x3, 0x8, 0x3, 0x6, 0x3f, 0x9b, 0x5, 0x6d3, 0xfffffffffffff0b2, 0xe54, 0x9}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000012c0)={0x0, r3, "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", "7d3a57dd1ccbbeac5103e41bd298043e78e7e653169bb66393c1a3918ca16ceb10a37b2de331b6b6f71ea4ef0dcb25d39c3081211a3bd9b608b44930f5f5acb0da67347a98fedf826c6593b86b7c4fc12c84cfdb1ddcb0a0137dc121f02ca587e248ce4ff6ea8c9efe21d883d1af3299cd0ee3dc7bc7d9c3ebd4178705e32e876a0bd2cfc45af4908d153b677369376950c4de5bd71f9c50dd0a09b4e61d4066ec6011b5d3b4385acb9395fc77f3f0dbfc01873576b1f3b9f4e237da2f8505de9813d51225e9a6a7b6b00ebb7baccfe9d84a7bfd5f082b541bd819f470c1e6ab05d5135211be7440e9bde56203090790a61c71798209adcd0df3df6871fad69612ec701cb9e32332dffa32ac0c129e65ceb32056a913d4e5d14b22c6710e13be41570eaf28f344874ff143ec53aff79bffb776c1a49d789a33d850bf53e2598d99d07c857a2269dd88b720704d2c81e2c4a63915ced264733954c90632a2ed4534648055c8544bb70035a7536a488adad914697cc200d211af7d14b4265a4308532f1af3bd6740dbd7179a45fde74f32c18b190547a505ddccaf62b327558e01fb95e7061c06752c9d5729cf953c0a5f26f2dba9a533cb80d157d65cadd9e433ec4b51c409cf6902e6fc5994d4a817c752920653e440055e57de1727b419aa8ae446155ee58201e26026bced4e6f16c33cdb0324a3581964260ec4948e2ccea5d1f35b5d3b9c2d3cea4b6485fb9857c504910a2b1be671307760d383b3331fd2aba3db7d77ceb1220c5624ca02bbb152adf0bbf3774a926f163295adf23ddfcad8219d53d79bb01ada2e575aba0dcb98f0d851b3a3d1a41b2a21f5fe7a9db7fe1c1b8355e18c7fb6771e6f9c9f36e1662d1ab896f07fb8df78a4c633f5d7349a7d55424dae79b6c92f546c21804b2edf39d550352f971d489021478f3ba9982999f505b104272772435f68cd307717ba85ca7004e2cda788a95f791afb3bc4eda7f441d29331d1c9a1a9dba70bdf72b142cf28cc8ce29354d7fe845e77023082d32562caaed8d0937493458a90ec82fb4ec2a2ed7d82d2deed69dba20b8fd603244e91d7d8dbb2e4f8bc0b3c877e08caa65928d10e2f55211f2126940a0177efd8daa43015c28d27e0851c4e30831df81c26a13a86a323ccfb264b948ce867b628c142cdb1eb8a7b2dfc9598b7f9cd86e64a9a205d8469bd0db997c85490a3de8461f50b96c70483165dcd0211180285b23c722c68b572510199e4e1abb3f523bd3bcae089350707d1bc9019e3ed733352f416e6ea2713eaa28013c004dad9c7b0b55acb579975a6ffb19294bbbc8c5ccfd20bd384689b60c60d669a701ebc4c1f062039592e84a7be51b3e46386159e02107103d266438146b55e01024fe7c6e05cc3e634ccbe6b6b71438146c634f10dec2aa96fb3b69c42d6466de01eee7e9036c8bef3f3af7036163970df16eefcf500f7360ba45b843cce18b8156bb2f416f71d32a177323c1e78b5fa3c22c8c982df2d89701a21e405f7add168da0d013f328487bc888583f2b7149a04a2aba3912ce5e526cb50b18af29023c5859f9f7942a7d6bc8ac05309723f9361ac55a86f8f8d11f208f77be4e9e1813630eaae298dbae9fb1ad87fa82564e69c5c06a313792f422a1ca41d3a676a8357c3b74c55ef48ed829b41ed19f9dacdced072caa00169fe9cfcb4a0c7f5b00c3173bba8785328ec60031e127f35a906d15284ea67d79c10b8110efd4c8484a8bc972093f4445d207d882f72d5b3d7de4d312e209c3192f27d52144e8db2017e2bdff0cee7129e2ed19725f9fcaaa476e4f8d97449003bab8c9b7c59cfaf3135aca40396f136d28b68dd6efc2e17762498881df4c43ec4a91435cc093aa2d72dfc6da49ceee4a9db6240ad95774b823ebdebd65cc3e11f020a8f6672edce5a1f29daa6d0f22203bec1d9b0486e962e17a2cd5045f8a214b60512acdf752f064a94d89b2e8214bfa2d37f30d80101381105532907d5cbc8418d1ee6d3a5f3baf0ce03122e645647e12eb598d21acf00217d24499e96ef0fa572eb584fa7b0c22f5d71aef72b960d00c5a080cafd94f7c12434f96ee5ea7f90a2d25420ab631755b9c675422632b82646bf19dfb9dd9d68952fcb72880a2b48489073d2f2e974dcb826f9dfd6f6fcea8bf2f814ff1f47bc3bb73cbfa0f3e622976cf8eb0663451594a144f87a693a95d910433aaa839494bbc24205a7633aa4f1ab5eb5b28c1979737f4ffd518724f976d3a0377a7e241ef3315eb188198e198f19ddf06bbeb8635dab6966928ca012f6b9ff9d89263e3a3517d79cd0e9590e631d5dec17874f448355c2673d16d4b52e374ecb582b2a436c5da21e0db09d2fbcf56436d0aed2a1ec12546839595385c912a1d98bba8ebe937aa7a45a4a3c6dac7e6723c4aaf3c5a71cc4c3e03ec6cc30323f61c1e74323dbb31a1e86b8a7ff08bc1c65b4df162df20fe322fc9fd47bab7a52fd45104ab4b1c06989bc5574e343ebdd53462360f42b4d7c2062d1f8ade4897e8ccccdb742ac2bf099e13ff499e63f92bf09b02b7930f75fb513c9df4626b67e7721b0691767198babcf177af2a7e70d8fbf2f2b512cdb56364a0583b72d211e34688a6b66aaa2a0eb2fe37aa24b8a212eea7bfc4ffde30046c426485fb1b412da9b10349d5b361fb366ce382cad7312cf4dba5bebde39aec8d2a275c1ebd11a8c048dabe7cda04a86a502c0e9ebfa40886e305827b011f99102b78c00706a8adc8153ec8f8cc26f184a585c5d1430858ea7e6dab798394b99c75e09fe465cc6d5b9f3c29693f862bc65f4f5cbdfdd12b491c731d7fc77e19c33465a7b7f39951e66ecf11b801b16b8eec4e1619a924ef8f0ff0019b8c4efcee00336a298dbbdf8234645dd1975eb131072776a983cd9253c8efd15b45b231c2fee40ba3a670a9054017150ad2965449f935a81197ad62adb390523dedd5cb1de873dc0b2c0c7c76c5d97c180f74edf41754ecb48a0f3111edd66238da38177e22bce0594449e214d3138380639a3a139aa48dfcca9a0193de125c93ea02e991ca163113df0aebc52e14f16ad203e552b0d47666c4a86cc181e061f671d9e9b0ecafb36bc8c32bb06924e4c590ec281ab90d01b194e5bf69a3ab64a3bf62902a5ea6a531714cd0eb5e6200fcf6fd51b83206c6c1ba449de5c093746eb555f9fd339aa23032da86bdfbb0a9d359f95ee4dd1761770e36f65cd398ddd2ed5834f124149aa743c6cdab27fbd94945f6849181c71e32100fe82a3170cecf9dd38cb52d63ea89dd79e9b0c80b2d9c8ce79a9d4d7ee487756ccbe6f6b2e6360914b61e4740e05fc6c781b3a26edb7e348661807526b80ab90130eebcc52c20efd17b0b039223255c62cbfded520124f7e3d63b7d7c4b5452704a8d179aa682f65eeb76a19f16e964b21c2caa6f88de3c94cfeb196940af94b806deb7e327bf20457885bafc574878a7fef578384b1c10809cd7f886c46c0deba1c3703e14c30595587a8f3f082d02c29f707cfd712805ba990d0dd1718c729e41ac810d2fe497d38a8bef8e2583d35304d6b08f005e636db05a29323961e44b6169c38e3baaf2e3097a5dad1e782fbc0f1b8bac919a09eeecda76f9f5edaf9cb13c08c3656cddff930a8211ab73fe8d6b87566ad9fe55b9a9dc047a21d85b08c30623e58af51a96bacf02f526d810c7533aa6087af7f76493a25c5d6a9974a64691b3b3fa57cd216461c3df5035c6988365531aa6b38fa10272327a4bb6f2eeb694edcebd46d729a6d52f791ff1c4fb759a943ca589194aa8e4ac49a0be96c75fdfbd0cad66a3f7b2a86ee5746cac112eccb8240b37241e399fea97a0d157b9b9dccbda71155437febf94d8e018b5f00084d6f3ce786d4fa8e32f1d3bd2c714566d82c9915b2aff5c63134ef540975e636fc17277f1f87d364b6055f4ea2c402496b7227582285d1eacf9dc9df2251ffbda9ea843cc971b0db2876f6ea36ddf25b2b6f040410c9a193b812c2b672a80780fae19c06c6a3fa7c50148d365c89c633c1adac99f544fb6dd76b6ba54b2e1c6bec6ddc8d4ee698b97d6647c251f172426c383eb58503c65b7b6f704ae5032417e8d9d0d405e51c2f638d2117045aeb2b4e611ea34970c562fe62cf42920dc9f8ea00b6b4a3e71c6f4440400955e90d27c4d8a72ae9ddf58e0359c996786187b023e887ae1ed058827df16f03d7ded0feb91d454fb18af293d220dbd0d3423a7a73edcff79092a736c3be02d3288f08d281f7d86b4d758b64a8236069084d33100dd1b97ddffeada65cc53ee99f89e3d2b52f931a8477102e137b7ae6d921b359ccf023e9602b5251723ce48abedc6d37c18a37b4951ff958cf19f8c6165fd5f92a0381845fb9597170d02b89e056c3d091cce0e583ff4bb975326dcb6c8dd6323bb1b293cfd0499e01fa018aea0144b8a3cf288bbb7f7e3d934f4dc9be11e22afc3552df5473d06eca1bcd4a44b117e5a41e2f9eb3ff15c4507e4560ffda136091fb0103ffe30e86aaa08055f21e3e2c3742af075d0e940c9e97adc215ca1cb8884b8826a132171b54da0261e1dccba3ec638e0480351674c072f5cc6c6015252f63887d49c2b215bb77db4affbfab88575ec13d692a00f92e55bd1f22e0e8b1154b506a00f704d528432f4ad57e4a2ee0d8a723bc5a283395b40c09abb276ae55f5e3055b67100ed78e888f6275bf80167402792de0174c9f003e6fe9bfe4bba6fd72bd888fae2b4aa2d624375cc6ad25c4193333547f8ba6602434ffc68dc0e8b94c006d576302bed481108f6ed642a46309d518a1bb193bcada23dbe9bfeea3280bf2fd6c5aa7b4893983a7b06c0d9a003962a9f50689808dd23ff34c3212c64125f641ae7b66d9deb4a2e9c50dd40d3e94f647fb51e5f11646cb830f8a2a9a13cffdedf6c81273e55afeb3870d88f0c6010d29678e938bc425e86506f4b37cbc3794e99d647a02e189f927578c63874d07d2ee0f25b0778bb96e58c9b896890d126525869945396e5e13083007ac89bd753947f586072ef2d9a7ab5d2e6e176886c6f414dda52504b7e3e77bb12fcb9a4494904dfae32fb35e5cd19cf0326de66b920cd417db0aa2d466fef19166b37f68c03213f4564eaa0cde726b6cd47edf41f832e1fadc50e449c4bde29942ef7bd3d1777e85767d38bb5b3142c8a333c84d6a016bf32e562054990048218079dadda011f6c52ac0ac5050e37ca997111b84991c03677759ac17b296b61cc4dfa727a8f58d68f09847a9202fc0f74986c0d164c7919952e0f2a030cdc8c72ef9c39e8b7d6c335b61c1af181095b209bd42a65680fad559af580f699a7deb99d2ac5aeb93fe62b5f8474289d43ab71e5e895006b6fc95cf"}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000022c0), 0x1, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000002300)={0x38, 0x1, r1, 0x0, 0x0, 0x401}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0xd, &(0x7f0000002380)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2c3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x3, 0x6, 0x8, 0x2, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0xbc, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x9, 0x80000001, 0x5}, 0x10, 0x1f732, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1000}, 0x90) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000002c0)={{0x0, 0x7fffffffffffffff, 0x434, 0x9, 0x3, 0x8, 0x3, 0x6, 0x3f, 0x9b, 0x5, 0x6d3, 0xfffffffffffff0b2, 0xe54, 0x9}}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000012c0)={0x0, r3, "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", "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"}) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000022c0), 0x1, 0x0) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000002300)={0x38, 0x1, r1, 0x0, 0x0, 0x401}) (async) 18:05:44 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0xd, &(0x7f0000002380)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2c3}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x3, 0x6, 0x8, 0x2, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0xbc, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x9, 0x80000001, 0x5}, 0x10, 0x1f732, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1000}, 0x90) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000002c0)={{0x0, 0x7fffffffffffffff, 0x434, 0x9, 0x3, 0x8, 0x3, 0x6, 0x3f, 0x9b, 0x5, 0x6d3, 0xfffffffffffff0b2, 0xe54, 0x9}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000012c0)={0x0, r3, "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", "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"}) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000022c0), 0x1, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000002300)={0x38, 0x1, r1, 0x0, 0x0, 0x401}) [ 727.705425][T19400] overlay: Unknown parameter 'lower' 18:05:44 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000006c0)={'vxcan0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @random="8aab200b54cb"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettfilter={0x54, 0x2e, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb}, {0x10, 0xa}, {0x9, 0xc}}, [{0x8, 0xb, 0xdc8}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x4f}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x200401e) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x10000, 0x0, {r1, r2/1000+60000}, {0x1, 0x2, 0x1, 0x81, 0x40, 0x9, "ec5036cb"}, 0x100, 0x3, {&(0x7f0000000080)=[{0x5, 0x20, {0xb6}, 0x2ce}, {0x0, 0x1ff, {}, 0xfff}]}, 0x9, 0x0, r4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x6, 0x8) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (async) sendfile(r3, r4, 0x0, 0x800000080004105) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @random="8aab200b54cb"}, 0x10) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettfilter={0x54, 0x2e, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb}, {0x10, 0xa}, {0x9, 0xc}}, [{0x8, 0xb, 0xdc8}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x4f}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x200401e) (async) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x10000, 0x0, {r1, r2/1000+60000}, {0x1, 0x2, 0x1, 0x81, 0x40, 0x9, "ec5036cb"}, 0x100, 0x3, {&(0x7f0000000080)=[{0x5, 0x20, {0xb6}, 0x2ce}, {0x0, 0x1ff, {}, 0xfff}]}, 0x9, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x6, 0x8) (async) 18:05:44 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r4, 0x0, 0x3}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r6, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r6, 0x0, 0xad5c, 0xfffffffffffffff5}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000040)={0x18, 0x0, 0x8, 0xb4}) [ 728.053219][ T37] audit: type=1804 audit(1695578745.049:566): pid=19415 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2404318525/syzkaller.x9zgeo/132/bus/file0" dev="overlay" ino=1967 res=1 errno=0 18:05:45 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r4, 0x0, 0x3}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r6, 0x0, 0x80000000}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r6, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r6, 0x0, 0xad5c, 0xfffffffffffffff5}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r6, 0x0, 0xad5c, 0xfffffffffffffff5}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000040)={0x18, 0x0, 0x8, 0xb4}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000040)={0x18, 0x0, 0x8, 0xb4}) 18:05:45 executing program 0: openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) r5 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000006c0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000006c0)={'vxcan0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r7, 0x1, 0x6, @random="8aab200b54cb"}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettfilter={0x54, 0x2e, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb}, {0x10, 0xa}, {0x9, 0xc}}, [{0x8, 0xb, 0xdc8}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x4f}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x200401e) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)=@multiplanar_overlay={0x7, 0x2, 0x4, 0x10000, 0x0, {r1, r2/1000+60000}, {0x1, 0x2, 0x1, 0x81, 0x40, 0x9, "ec5036cb"}, 0x100, 0x3, {&(0x7f0000000080)=[{0x5, 0x20, {0xb6}, 0x2ce}, {0x0, 0x1ff, {}, 0xfff}]}, 0x9, 0x0, r4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x6, 0x8) 18:05:45 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:45 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0xf, 0x0) 18:05:45 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r4, 0x0, 0x3}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r6, 0x0, 0x80000000}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r6, 0x0, 0xad5c, 0xfffffffffffffff5}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000040)={0x18, 0x0, 0x8, 0xb4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (async) sendfile(r1, r2, 0x0, 0x800000080004105) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r4, 0x0, 0x3}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000180)={0x38, 0x1, r6, 0x0, 0x80000000}) (async) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000000c0)={0x38, 0x1, r6, 0x0, 0xad5c, 0xfffffffffffffff5}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000040)={0x18, 0x0, 0x8, 0xb4}) (async) [ 728.376684][T19426] overlay: Bad value for 'lowerdir' 18:05:45 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0xffffffffffffff54, 0xb3}) 18:05:45 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) r1 = dup2(r0, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x6, 0x4000d08, 0x1, @discrete={0xf3ba, 0x6}}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) setsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000000100), 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000000c0)={0x4, r1, 0x80000}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) 18:05:45 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) r1 = dup2(r0, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x6, 0x4000d08, 0x1, @discrete={0xf3ba, 0x6}}) (async) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) setsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000000100), 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000000c0)={0x4, r1, 0x80000}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) 18:05:45 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) (async, rerun: 32) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0xffffffffffffff54, 0xb3}) 18:05:45 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:45 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) r1 = dup2(r0, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x6, 0x4000d08, 0x1, @discrete={0xf3ba, 0x6}}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) setsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000000100), 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000000c0)={0x4, r1, 0x80000}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) dup2(r0, 0xffffffffffffffff) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x6, 0x4000d08, 0x1, @discrete={0xf3ba, 0x6}}) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xc3) (async) setsockopt$ax25_int(r3, 0x101, 0x3, &(0x7f0000000100), 0x4) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000000c0)={0x4, r1, 0x80000}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) (async) [ 728.651086][ T37] audit: type=1804 audit(1695578745.649:567): pid=19451 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2404318525/syzkaller.x9zgeo/133/bus/file0" dev="overlay" ino=1964 res=1 errno=0 [ 728.699002][T19452] overlay: Bad value for 'lowerdir' 18:05:45 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0xfffffffa, 0x7fff, 0x3, {0x3, @vbi={0x3, 0x1f, 0x0, 0x33524742, [0x182dd005, 0x100], [0x2, 0xaa], 0x13a}}, 0x3}) 18:05:45 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0xffffffffffffff54, 0xb3}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0xffffffffffffff54, 0xb3}) 18:05:45 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x10, 0x0) 18:05:45 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0xfffffffa, 0x7fff, 0x3, {0x3, @vbi={0x3, 0x1f, 0x0, 0x33524742, [0x182dd005, 0x100], [0x2, 0xaa], 0x13a}}, 0x3}) 18:05:45 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0xfffffffa, 0x7fff, 0x3, {0x3, @vbi={0x3, 0x1f, 0x0, 0x33524742, [0x182dd005, 0x100], [0x2, 0xaa], 0x13a}}, 0x3}) 18:05:45 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc}) r5 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f00000001c0)={0xfffffe01, 0x0, 0x400007, "8e2f7124e052f9bc1f01661238594063034b9d298de84179de2ca3130a0975819e543a97f62f98727252e2b17204abc967188fa2597a6a5117e66ce5", 0x6, "d6529f5c37ffff85e5c8f5d00c602d52dbed6cae07b0aa3fb8f87db5f6c353ad0986340c3c0f82590a6dec2e81000000000000000000000000180100", 0x18}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:45 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:45 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "1111254101000000dc4ce580c9fc68f5d1e60d1aeb7175b3431389c8859c9be9"}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) 18:05:45 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc}) r5 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f00000001c0)={0xfffffe01, 0x0, 0x400007, "8e2f7124e052f9bc1f01661238594063034b9d298de84179de2ca3130a0975819e543a97f62f98727252e2b17204abc967188fa2597a6a5117e66ce5", 0x6, "d6529f5c37ffff85e5c8f5d00c602d52dbed6cae07b0aa3fb8f87db5f6c353ad0986340c3c0f82590a6dec2e81000000000000000000000000180100", 0x18}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (async) sendfile(r3, r4, 0x0, 0x800000080004105) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc}) (async) syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) (async) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f00000001c0)={0xfffffe01, 0x0, 0x400007, "8e2f7124e052f9bc1f01661238594063034b9d298de84179de2ca3130a0975819e543a97f62f98727252e2b17204abc967188fa2597a6a5117e66ce5", 0x6, "d6529f5c37ffff85e5c8f5d00c602d52dbed6cae07b0aa3fb8f87db5f6c353ad0986340c3c0f82590a6dec2e81000000000000000000000000180100", 0x18}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r1}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) (async) 18:05:45 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "1111254101000000dc4ce580c9fc68f5d1e60d1aeb7175b3431389c8859c9be9"}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "1111254101000000dc4ce580c9fc68f5d1e60d1aeb7175b3431389c8859c9be9"}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) (async) [ 729.130427][T19480] overlay: Bad value for 'lowerdir' [ 729.194820][ T37] audit: type=1804 audit(1695578746.199:568): pid=19482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2404318525/syzkaller.x9zgeo/134/bus/file0" dev="overlay" ino=1971 res=1 errno=0 [ 729.329781][ T37] audit: type=1804 audit(1695578746.329:569): pid=19481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2404318525/syzkaller.x9zgeo/134/bus/file0" dev="overlay" ino=1971 res=1 errno=0 18:05:46 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "1111254101000000dc4ce580c9fc68f5d1e60d1aeb7175b3431389c8859c9be9"}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "1111254101000000dc4ce580c9fc68f5d1e60d1aeb7175b3431389c8859c9be9"}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) (async) 18:05:46 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r3, r4, 0x0, 0x800000080004105) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc}) (async) r5 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f00000001c0)={0xfffffe01, 0x0, 0x400007, "8e2f7124e052f9bc1f01661238594063034b9d298de84179de2ca3130a0975819e543a97f62f98727252e2b17204abc967188fa2597a6a5117e66ce5", 0x6, "d6529f5c37ffff85e5c8f5d00c602d52dbed6cae07b0aa3fb8f87db5f6c353ad0986340c3c0f82590a6dec2e81000000000000000000000000180100", 0x18}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x2, r1}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:46 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:46 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x28, 0x0) 18:05:46 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x100, 0x2, 0x3, 0x0, 0x3}) 18:05:46 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x73) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x8, 0xffffffffffffffff, 0x0, 0x7ff, 0x14, &(0x7f0000000040)="cb22bba1e142bf7b18a3b949fb9e100aa9bb854a", 0x3}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0xffffffffffffff54, 0xb3}) 18:05:46 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x100, 0x2, 0x3, 0x0, 0x3}) 18:05:46 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x73) (async, rerun: 64) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (rerun: 64) sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x8, 0xffffffffffffffff, 0x0, 0x7ff, 0x14, &(0x7f0000000040)="cb22bba1e142bf7b18a3b949fb9e100aa9bb854a", 0x3}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0xffffffffffffff54, 0xb3}) 18:05:46 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x100, 0x2, 0x3, 0x0, 0x3}) 18:05:46 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x2, 0x0, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 729.471673][T19504] overlayfs: missing 'lowerdir' 18:05:46 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x73) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') (rerun: 32) sendfile(r1, r2, 0x0, 0x800000080004105) ioctl$IOMMU_TEST_OP_ACCESS_RW(r2, 0x3ba0, &(0x7f0000000100)={0x38, 0x8, 0xffffffffffffffff, 0x0, 0x7ff, 0x14, &(0x7f0000000040)="cb22bba1e142bf7b18a3b949fb9e100aa9bb854a", 0x3}) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) (rerun: 64) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0xffffffffffffff54, 0xb3}) [ 729.765921][ T37] audit: type=1804 audit(1695578746.759:570): pid=19513 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir2404318525/syzkaller.x9zgeo/135/bus/file0" dev="overlay" ino=1968 res=1 errno=0 [ 729.947894][ T37] audit: type=1804 audit(1695578746.949:571): pid=19512 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/syzkaller-testdir2404318525/syzkaller.x9zgeo/135/bus/file0" dev="overlay" ino=1968 res=1 errno=0 18:05:46 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:46 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x202441, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:46 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x38, 0x0) 18:05:46 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x2, 0x0, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x2, 0x0, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) 18:05:46 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x202441, 0x0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:46 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x2, 0x0, 0x0, "111125412cdc2128dc4ce580c9fc68f5d1e60d892460823d0ce9408b72d19be9"}) [ 729.975062][ T37] audit: type=1400 audit(1695578746.969:572): avc: denied { append } for pid=19516 comm="syz-executor.3" name="btrfs-control" dev="devtmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 18:05:47 executing program 3: openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x202441, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:47 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xffffffff, 0x1, 0x0, "111146492cdc2128dc4ce580c94a17a500d19bedec00", 0x485e356f}) [ 730.012753][ T37] audit: type=1400 audit(1695578747.009:573): avc: denied { read } for pid=19526 comm="syz-executor.0" name="mice" dev="devtmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 730.024868][ T37] audit: type=1400 audit(1695578747.009:574): avc: denied { open } for pid=19526 comm="syz-executor.0" path="/dev/input/mice" dev="devtmpfs" ino=861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 730.037220][T19531] overlayfs: missing 'lowerdir' 18:05:47 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000100), 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001140)={0x0, 0x0, 0x8000, 0x13d0}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000100), 0x4) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000001180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r5, 0x3ba0, &(0x7f0000001100)={0x38, 0x3, r6, 0x0, 0x10000, 0x1000, &(0x7f0000000100)="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"}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0xffffffffffffff54, 0xb3}) 18:05:47 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) [ 730.192097][ T37] audit: type=1400 audit(1695578747.189:575): avc: denied { ioctl } for pid=19533 comm="syz-executor.3" path="socket:[55738]" dev="sockfs" ino=55738 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 730.339641][T19539] overlayfs: missing 'lowerdir' 18:05:47 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xffffffff, 0x1, 0x0, "111146492cdc2128dc4ce580c94a17a500d19bedec00", 0x485e356f}) 18:05:47 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (rerun: 32) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000100), 0x4) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001140)={0x0, 0x0, 0x8000, 0x13d0}) (async) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000100), 0x4) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000001180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) (async, rerun: 32) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) (async, rerun: 32) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (rerun: 32) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r5, 0x3ba0, &(0x7f0000001100)={0x38, 0x3, r6, 0x0, 0x10000, 0x1000, &(0x7f0000000100)="a8db5c1c678afde2ee5a936876deb99863c01c84f327bc8c368344c1916ea0b869b03395444f9e3e9f94582e18f141bee1984de4afe66e3575ac0ef5b05e22c297a24dfcd93f5b7f0e8d05edd038fe7a7faae8b773b0c872d8ab5a7c205905d729a3677d4fd5dd1634810fd23ece63f9bd737599ae64915713f3259071a6b19e307a65dffadb8a2347572cfa3d35d72fd653993d4073ed979d88fa2e9fc5959609bac98b9f4f75317ffaf3ab7021ac040724fa1887f14f092b5968adf79feba41e6a476a039e62b7e52fa12da6b596885ca6670f15bdb56a12e71641cd510be69a9ddad314e402015c23972ad45209ab81ea39e03b24b66d9137accbfbb29c07143847218c761d65db767e725d10be8dc9e7514a3291a984f002ab7b13ad930d7e8c9667d248c9a3a52d93289fa5ea172b938cd4ca73defcc1bd29f952fbdae8f15b88dc0877a543a65a49be9d186de7df75589ba23c6dd6e677fb2eb37940c3afb942453c59844342cb7b68f683dd936ebbbe66d0b3dc7863c2d866fe4ff1ad981ece951072d66b2456038452e58383dbc6e3401959347a73c79042c446b75887879e3774c9d9ea9a3529fbffa775277cce889a3663543ab01cfb45552d3f574d22aed2d8ec38fd28faebb95a32dfc5b3c4ae7986c52a7c439c29927948d3a10a7575c7a12123e701641f1ae3c89232ca65b2addf674b697a5f22f374ea9ed8c5f721ea1fe3b9c109ec2411b0146b562c637490cc8fc5eca0054fe59e6dab741ada20a4a59bfb1ff374eccd0541a36ffa1121b21b4799b8c1dd4493c9da67f1f840431a8379c99790628053a99433baa9fcde72ba6c1b71edff83f099aa3c15c23c91c0269f1e5c307adf710c6d12a384cc3e366df9e5bbc6868c0dd6963b4743a15002b66ef17c0dbcf0f1573f0dd345e6027d7b7fa84b17334bb3e374a71a2629c3bd7f75d8430878b5617bc3c137036f3e12e73d3bb195f5b14954057e9ecbe44bd770137989bbc0ef3914b926fccac3bc5d3669434cf04e8a5d600bd10f4018a3a95511e971d36f9766c75177aaf4a3b2b53a8eb9c170fc93bedf795f9bed93f052fc5598ca636e0b931420efa6fdbf10a8dc6fede41b729a1cb19bb98ac073cd782e2e47ab1b4133f69a34f6081b81ea35625a060e060ab6ba1e10283e0cd5e436971e48f6dc590718e6d385e9dc32207e3f39e75ace3c2d7b06459c47f2f01d6be8d7d2f7e76b71e100583705fc1486c351cf230f5edcf5f31fa07b90301a33107f369d8be85aae2bb3c0ae67dbd0761a75946ab33a36b643ec3228fe2fcec30af521c24ea661f1e9cc505b878f7ec466f9ed4bbfba03a769dbbb8670f145b47b6b6c807d7c115da8cc3298ec5a894b1b8a4d8cdd4b9427ed880666bf1a9958ccd00dd568a2f3d2dc42e38facd62458bd02898b5c3964b25bac7fa9fe3193db277f137854f699f7926555a0dc6a752e27b5518f49e75eb361c054773dc9ac91e895146c15df072bf44f90616c4f6fed543e59aa8a4744d4ac3e6ed6017d91488b578642087226249983b143f3a3be82c49de287c355fe4d7b0385ab4ae0fd1c4062f8faf147f34ede90729bc8ab6781eafaadc473fc37510f4faccc51e01db82b5f4def17844ba9fa35c30f75a151cc4e5718ef5e682ded78061ab2a7a71eeaf9943f2bfb15ba8a5fd81fecd2fb0d417e771093af4e2a518b9309651ec3213eeb0518497c3a9a75b4d7ed5f0b3d2f7c217451274704091e343e087adc8eab8b018a7cc9999a3c857f2d95d9aca61d16d44b7859ed9beea7b651eafdb5d59ae1d833dbcd94d5eec52d1e6db7ac6e70a5c264bbc40e4aa8e34c97e4f46bc1b64d9f3a2fdb4b0ad697c81ae6514200850ac752d8605d646a648b0020a0a184f218426528ca7efadeab9bfdb618caa52f47831a1147b20406e50313e24d308694107e1936adea316192619cf22ca90af0a5f9b04fdd1663e10fff7949fc5c3c79e0b0184159dfb52f2dec4345b4e8d3ca531b86655cf6213a05c70a5d011b4a8687646da00ecbb86f45d44b8c038edac89d29327b9afa38433691a57467dfc2197829554a077b1bbf0b52e3ca0e623249e58fbb2928a8582f8d9555527d8f257140fb5811dd0fa1b335d1f4ed6f56ac04c60196f43004d0507f72b15694097a6a270cf50dc7ff4e8dd77306ac718d339a00dbc57e9b87987c57a0e9a5dea8f222ec112ee539411fa850b07f30d14ef50cd2d7ecc60c27df32c41fce80a56cdc5851dad4284003503647a76f8fcc77c5ddb01bccf18403e2ac3a571ba7b54a5d8056c69692663e4cfb984a59b3bfb7a6b5bbc5d0a9809549e5c252b6142ff5559cd93b0d1d65bc1d8fd65f90dbb54bcb29cd1f09c3cca02489db6c5a194731791c56aaa1c96dcf1c45d488794d50a4dacc4a2547f46364ca05eb4859f7d7e48bf709ff222d6ce2ed8621c603413d1247440373d719bd03b26cce5afeb01bef7feb7544ddaa40acf30229c25864c81fe1f2c098134770453c8f2b3beca794177597fe5b41c2f045bf5baf58919d288f16bce89f1c88bd152aa0186b7c6bca34ae728506f30ffbd5220e302e8d48b01cd86e446163552c3d4b3edc8fb8f90c5ffa810e5c54b660a66365b1f1b5a82d4c89f22d9c532d15dcf2f8ec98916c44a211a7b5e3f6998559f2a7d959c5d25423bb0342bb815ba0b0e72f47302f4d1f806df354f6f5abf48a6ce0aedc380757307a60642c136e7ac927821bd67f307c3a3ee46b3247d341c67ecf25d92273e4ec61c09f70bce97c71d50149e76bc67ed739ea4b645cf5de95c55c67883b86a0e1d531f0ba4fff44d0c4fd859b10009d798b27f41bb530f97332df5912a0b298efbad206fca939a061e6f8c933205a8013a669562d38221329b5826376c7f0356ee012c130d6dcbc2889f5ec54ccf87ceba98fe53de92304d8d435f2fc358bcefd7e9401402f1bb75304afa485810bd8d68d19699c734065cef18010d17d2850b863c083a45184ba30f7e3d7624749b2a8b6b1ff22aa1b2d6469c96bf34502fa783c12827b6292211ed64a47c2fea47b4646a81471a0bb9dc05838dfc661009c158c40cb41bc01d3d4bd30007d5dde733388cc3a39545472cb006e2a8a654ca84217efff3823ccd72372b8274080d8be426cb78635032328c86d6d4ca29a2a7d248df4b01c0ddc8a277b87ae1d9d6b7bf67daf6cfed7b4bc625f9a5c1677c54c68a35847fdde81d11dfd0e4cb32ce7e3110b107da8c51708bca7ba81428171ff5ae0f18e9e219b86dd2fa1cbbd6d9ed4c165ea12e35e43beaaaeabbcf0960a0bc42fac03bd57a726b645a38ff1ac517b4de8f3d8deea6fc7aa552e72fdea4a2bb9c84db17de4e485a15e1cbbfc781240c54f611bc46641ca798ba73b690070d9c8649e501bab683057048135e85f1036a9eac118758a5d67432d0779d50bafc054b58a0978c7cdf8e8fe35c898c06d5f96969a9c1ff71da836396e22b5268a2afd26b5698e676a3064c3ec07bbf6aaeeb9eacdd2f6d1a926c9cb4b11ed13d4fb7a46af720891a4d30ff7b49e7befbaaaeb18e1eaa6c80167f6082964e725f49bf656e2db806c527de4e57a70dc46f3008b4d0e8a8fd020474fed22e76e2711d344d2aa813a924188ddbef0a1ec08ff4838452c56eb9300314c3a962906430e80aaf356a461e2a31483a73447ccf1338496ec23c8b8ee511a59969eb62fa345413520efef82188ad1aea31f6293576b5dd1231f7ae99ff70d3b23c19383ecae8020d71092f2a12369536f78fc08617d5b83584adc3a3eaf40058df77d6b742d0db43dec01479142b16cf3d18dfae0e3864e6d1f267cb82c9be9690e0645c01025c357193eeda3b24d9f1910d169ffd832e1ae25d814a995ce992e2fe04cbef0222acc6c483588f2c8fc13120e10918e1b42225b2113c32e642c47d77bff7b8ccf372be322a7a79bd6242708a6c1c6992823c2911b30d4df1d7d520f04d628ee36187a4c47ae5ba843b90814636846e65340fc58e0855dba09f54b0a933c178624d62df64863c71e27acd3e9b4c771bf04fe595f547b159f05731d044abe923d9c27ee3320a739bf6e1767e252e21687574c469d98b499204778682462e30457c63ec3b2be9c8426d53cdcef7f0021c16fe60beaf3f1365fcd18ff2c6992126d418a305b0734e1656686a91ce82abdf07bf6a816cbecb759ed079a65ce77450b9d4e9c1e9c0a603ecef906240b7f5700d5752472dea52f6d2cd9465579d1d9d9a0967fff40847cdaecd31a63183f5cf59a0cece4e2d392ef36f5038de819c052e2d0cc2bd3e8e0bc176362106f3c6dda2266d2c8031ac450d10f9249becc4cf0964ed92c1f829a0443e06a5acbfb8017a820e54d42185781720e051a01763d426099ef6f61712931c901aae98683f7c1713db7179c10652e1430d538d0d9bb0cb55ae035e0c1cd9283eaee8ee091b292c8e93679c2f1c8810f5b3a4f517af3eacc29f6c8d72af622fd05680a116be34d8f0c6a199d519cb5720fd306f5c30ea16b633daf4cd6944ae2754d46f85ac596032dadf913f585fcbffc245f4c8c6ffe259be69898e37788089027fcf826e3a3ddc16e16073c026e79f2bb99a8f82dd821ad86b7657fc899c19b52425ddb4e345cf9e05b397f34bcdf7aca98ce8d6d6aaad7f9ee2c7415445c29c79087c8fd46a150f0f3a88b157ca680726855304d939e797f11b5a7cc12f0eb2063b3bea47fd14574b240c917689e71104aa789eca341758d2e82ca0b1f7d8521132a9305588583f51182259f8d5d11d926e9010fc7f99d21dabf44ac3b533c397bfa9772e33078ecfb65b4a0eb10d6faf3650880e9ab43357d271d990c3a17709db89860472ac882d64d35e400184810fb4728f10723bc03b37c646fc46146f987cd6782139fc5c2912b61759abe007998048b9761bdf260cea14db5f31427df77416313c74a6c387e4c3203be0071b589dffd7da9e1a0732cb38c62d7aa55e13b9acab99dbf2c987aa99cdf95b1c0c8bbd5704890bf8d54e88f1be59a438897b2c38b7de86052edc4dae4cd034bf68f9608cdd49b953d6e8cfe09c9e476aca57de8ad302208c2ec5eb6e414f9ec37419a358d9845165144b437bca3043bb9d4288a037e86b02e5a6f0215ba42148112092debe5e82951afc8f963e2b7f0bf21486256dc312dcb6524f584957d4be585f848468709320aa40c7dffb9e4cc7a30c5efe6202909919078967f9f0b1a40317214f5dac1e11a38e4487666ae01c232967e3eea6344dbd4a0c4e29384f4377eca618974386e80faa353f8f4f984ac8f592ab61e604bf46c23bf69cec44f4f7630f1354edff0413410a9435401c4697bc7f5c24a0db54cba107e4f42d4e77d5cd6fea96b2500fcdbe4503de7c20aff06c0169a074cbd6c8668de1518a49768e8e33f3289a38346ea86a7516cd69473f288bceb70b25c045475c8007743d631464d76158552d08e7a52de7e7ed6953f7a9e7584c1f53ef7ad7e346b79837e0651a3b5f76e295ea91c87e31859166cdc119ad22b318638194557540fdf883762287778afe97aabaddd1bcbc29785696b4939b7ecc5594ea6bce4d594685755dcc5d74fdb89629e96bf1242a19e1d913c545c05194e5f44d62bba09e704c4c0dae81c988e05e40165b593e4701ee6c12eb37861d46ca4b05a7b5f57f3e305cf7e9ff462aa9fc9a380719341597509dbc0ec2ec8527d78a8721882458d436d4ad464c3efe7ca6dcab8ff3774ee14a41be105293e81bc0beac3"}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0xffffffffffffff54, 0xb3}) 18:05:47 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:47 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x3b, 0x0) 18:05:47 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000100), 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000001140)={0x0, 0x0, 0x8000, 0x13d0}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000100), 0x4) (async) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000001180)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) (async, rerun: 32) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r4, r5, 0x0, 0x800000080004105) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r5, 0x3ba0, &(0x7f0000001100)={0x38, 0x3, r6, 0x0, 0x10000, 0x1000, &(0x7f0000000100)="a8db5c1c678afde2ee5a936876deb99863c01c84f327bc8c368344c1916ea0b869b03395444f9e3e9f94582e18f141bee1984de4afe66e3575ac0ef5b05e22c297a24dfcd93f5b7f0e8d05edd038fe7a7faae8b773b0c872d8ab5a7c205905d729a3677d4fd5dd1634810fd23ece63f9bd737599ae64915713f3259071a6b19e307a65dffadb8a2347572cfa3d35d72fd653993d4073ed979d88fa2e9fc5959609bac98b9f4f75317ffaf3ab7021ac040724fa1887f14f092b5968adf79feba41e6a476a039e62b7e52fa12da6b596885ca6670f15bdb56a12e71641cd510be69a9ddad314e402015c23972ad45209ab81ea39e03b24b66d9137accbfbb29c07143847218c761d65db767e725d10be8dc9e7514a3291a984f002ab7b13ad930d7e8c9667d248c9a3a52d93289fa5ea172b938cd4ca73defcc1bd29f952fbdae8f15b88dc0877a543a65a49be9d186de7df75589ba23c6dd6e677fb2eb37940c3afb942453c59844342cb7b68f683dd936ebbbe66d0b3dc7863c2d866fe4ff1ad981ece951072d66b2456038452e58383dbc6e3401959347a73c79042c446b75887879e3774c9d9ea9a3529fbffa775277cce889a3663543ab01cfb45552d3f574d22aed2d8ec38fd28faebb95a32dfc5b3c4ae7986c52a7c439c29927948d3a10a7575c7a12123e701641f1ae3c89232ca65b2addf674b697a5f22f374ea9ed8c5f721ea1fe3b9c109ec2411b0146b562c637490cc8fc5eca0054fe59e6dab741ada20a4a59bfb1ff374eccd0541a36ffa1121b21b4799b8c1dd4493c9da67f1f840431a8379c99790628053a99433baa9fcde72ba6c1b71edff83f099aa3c15c23c91c0269f1e5c307adf710c6d12a384cc3e366df9e5bbc6868c0dd6963b4743a15002b66ef17c0dbcf0f1573f0dd345e6027d7b7fa84b17334bb3e374a71a2629c3bd7f75d8430878b5617bc3c137036f3e12e73d3bb195f5b14954057e9ecbe44bd770137989bbc0ef3914b926fccac3bc5d3669434cf04e8a5d600bd10f4018a3a95511e971d36f9766c75177aaf4a3b2b53a8eb9c170fc93bedf795f9bed93f052fc5598ca636e0b931420efa6fdbf10a8dc6fede41b729a1cb19bb98ac073cd782e2e47ab1b4133f69a34f6081b81ea35625a060e060ab6ba1e10283e0cd5e436971e48f6dc590718e6d385e9dc32207e3f39e75ace3c2d7b06459c47f2f01d6be8d7d2f7e76b71e100583705fc1486c351cf230f5edcf5f31fa07b90301a33107f369d8be85aae2bb3c0ae67dbd0761a75946ab33a36b643ec3228fe2fcec30af521c24ea661f1e9cc505b878f7ec466f9ed4bbfba03a769dbbb8670f145b47b6b6c807d7c115da8cc3298ec5a894b1b8a4d8cdd4b9427ed880666bf1a9958ccd00dd568a2f3d2dc42e38facd62458bd02898b5c3964b25bac7fa9fe3193db277f137854f699f7926555a0dc6a752e27b5518f49e75eb361c054773dc9ac91e895146c15df072bf44f90616c4f6fed543e59aa8a4744d4ac3e6ed6017d91488b578642087226249983b143f3a3be82c49de287c355fe4d7b0385ab4ae0fd1c4062f8faf147f34ede90729bc8ab6781eafaadc473fc37510f4faccc51e01db82b5f4def17844ba9fa35c30f75a151cc4e5718ef5e682ded78061ab2a7a71eeaf9943f2bfb15ba8a5fd81fecd2fb0d417e771093af4e2a518b9309651ec3213eeb0518497c3a9a75b4d7ed5f0b3d2f7c217451274704091e343e087adc8eab8b018a7cc9999a3c857f2d95d9aca61d16d44b7859ed9beea7b651eafdb5d59ae1d833dbcd94d5eec52d1e6db7ac6e70a5c264bbc40e4aa8e34c97e4f46bc1b64d9f3a2fdb4b0ad697c81ae6514200850ac752d8605d646a648b0020a0a184f218426528ca7efadeab9bfdb618caa52f47831a1147b20406e50313e24d308694107e1936adea316192619cf22ca90af0a5f9b04fdd1663e10fff7949fc5c3c79e0b0184159dfb52f2dec4345b4e8d3ca531b86655cf6213a05c70a5d011b4a8687646da00ecbb86f45d44b8c038edac89d29327b9afa38433691a57467dfc2197829554a077b1bbf0b52e3ca0e623249e58fbb2928a8582f8d9555527d8f257140fb5811dd0fa1b335d1f4ed6f56ac04c60196f43004d0507f72b15694097a6a270cf50dc7ff4e8dd77306ac718d339a00dbc57e9b87987c57a0e9a5dea8f222ec112ee539411fa850b07f30d14ef50cd2d7ecc60c27df32c41fce80a56cdc5851dad4284003503647a76f8fcc77c5ddb01bccf18403e2ac3a571ba7b54a5d8056c69692663e4cfb984a59b3bfb7a6b5bbc5d0a9809549e5c252b6142ff5559cd93b0d1d65bc1d8fd65f90dbb54bcb29cd1f09c3cca02489db6c5a194731791c56aaa1c96dcf1c45d488794d50a4dacc4a2547f46364ca05eb4859f7d7e48bf709ff222d6ce2ed8621c603413d1247440373d719bd03b26cce5afeb01bef7feb7544ddaa40acf30229c25864c81fe1f2c098134770453c8f2b3beca794177597fe5b41c2f045bf5baf58919d288f16bce89f1c88bd152aa0186b7c6bca34ae728506f30ffbd5220e302e8d48b01cd86e446163552c3d4b3edc8fb8f90c5ffa810e5c54b660a66365b1f1b5a82d4c89f22d9c532d15dcf2f8ec98916c44a211a7b5e3f6998559f2a7d959c5d25423bb0342bb815ba0b0e72f47302f4d1f806df354f6f5abf48a6ce0aedc380757307a60642c136e7ac927821bd67f307c3a3ee46b3247d341c67ecf25d92273e4ec61c09f70bce97c71d50149e76bc67ed739ea4b645cf5de95c55c67883b86a0e1d531f0ba4fff44d0c4fd859b10009d798b27f41bb530f97332df5912a0b298efbad206fca939a061e6f8c933205a8013a669562d38221329b5826376c7f0356ee012c130d6dcbc2889f5ec54ccf87ceba98fe53de92304d8d435f2fc358bcefd7e9401402f1bb75304afa485810bd8d68d19699c734065cef18010d17d2850b863c083a45184ba30f7e3d7624749b2a8b6b1ff22aa1b2d6469c96bf34502fa783c12827b6292211ed64a47c2fea47b4646a81471a0bb9dc05838dfc661009c158c40cb41bc01d3d4bd30007d5dde733388cc3a39545472cb006e2a8a654ca84217efff3823ccd72372b8274080d8be426cb78635032328c86d6d4ca29a2a7d248df4b01c0ddc8a277b87ae1d9d6b7bf67daf6cfed7b4bc625f9a5c1677c54c68a35847fdde81d11dfd0e4cb32ce7e3110b107da8c51708bca7ba81428171ff5ae0f18e9e219b86dd2fa1cbbd6d9ed4c165ea12e35e43beaaaeabbcf0960a0bc42fac03bd57a726b645a38ff1ac517b4de8f3d8deea6fc7aa552e72fdea4a2bb9c84db17de4e485a15e1cbbfc781240c54f611bc46641ca798ba73b690070d9c8649e501bab683057048135e85f1036a9eac118758a5d67432d0779d50bafc054b58a0978c7cdf8e8fe35c898c06d5f96969a9c1ff71da836396e22b5268a2afd26b5698e676a3064c3ec07bbf6aaeeb9eacdd2f6d1a926c9cb4b11ed13d4fb7a46af720891a4d30ff7b49e7befbaaaeb18e1eaa6c80167f6082964e725f49bf656e2db806c527de4e57a70dc46f3008b4d0e8a8fd020474fed22e76e2711d344d2aa813a924188ddbef0a1ec08ff4838452c56eb9300314c3a962906430e80aaf356a461e2a31483a73447ccf1338496ec23c8b8ee511a59969eb62fa345413520efef82188ad1aea31f6293576b5dd1231f7ae99ff70d3b23c19383ecae8020d71092f2a12369536f78fc08617d5b83584adc3a3eaf40058df77d6b742d0db43dec01479142b16cf3d18dfae0e3864e6d1f267cb82c9be9690e0645c01025c357193eeda3b24d9f1910d169ffd832e1ae25d814a995ce992e2fe04cbef0222acc6c483588f2c8fc13120e10918e1b42225b2113c32e642c47d77bff7b8ccf372be322a7a79bd6242708a6c1c6992823c2911b30d4df1d7d520f04d628ee36187a4c47ae5ba843b90814636846e65340fc58e0855dba09f54b0a933c178624d62df64863c71e27acd3e9b4c771bf04fe595f547b159f05731d044abe923d9c27ee3320a739bf6e1767e252e21687574c469d98b499204778682462e30457c63ec3b2be9c8426d53cdcef7f0021c16fe60beaf3f1365fcd18ff2c6992126d418a305b0734e1656686a91ce82abdf07bf6a816cbecb759ed079a65ce77450b9d4e9c1e9c0a603ecef906240b7f5700d5752472dea52f6d2cd9465579d1d9d9a0967fff40847cdaecd31a63183f5cf59a0cece4e2d392ef36f5038de819c052e2d0cc2bd3e8e0bc176362106f3c6dda2266d2c8031ac450d10f9249becc4cf0964ed92c1f829a0443e06a5acbfb8017a820e54d42185781720e051a01763d426099ef6f61712931c901aae98683f7c1713db7179c10652e1430d538d0d9bb0cb55ae035e0c1cd9283eaee8ee091b292c8e93679c2f1c8810f5b3a4f517af3eacc29f6c8d72af622fd05680a116be34d8f0c6a199d519cb5720fd306f5c30ea16b633daf4cd6944ae2754d46f85ac596032dadf913f585fcbffc245f4c8c6ffe259be69898e37788089027fcf826e3a3ddc16e16073c026e79f2bb99a8f82dd821ad86b7657fc899c19b52425ddb4e345cf9e05b397f34bcdf7aca98ce8d6d6aaad7f9ee2c7415445c29c79087c8fd46a150f0f3a88b157ca680726855304d939e797f11b5a7cc12f0eb2063b3bea47fd14574b240c917689e71104aa789eca341758d2e82ca0b1f7d8521132a9305588583f51182259f8d5d11d926e9010fc7f99d21dabf44ac3b533c397bfa9772e33078ecfb65b4a0eb10d6faf3650880e9ab43357d271d990c3a17709db89860472ac882d64d35e400184810fb4728f10723bc03b37c646fc46146f987cd6782139fc5c2912b61759abe007998048b9761bdf260cea14db5f31427df77416313c74a6c387e4c3203be0071b589dffd7da9e1a0732cb38c62d7aa55e13b9acab99dbf2c987aa99cdf95b1c0c8bbd5704890bf8d54e88f1be59a438897b2c38b7de86052edc4dae4cd034bf68f9608cdd49b953d6e8cfe09c9e476aca57de8ad302208c2ec5eb6e414f9ec37419a358d9845165144b437bca3043bb9d4288a037e86b02e5a6f0215ba42148112092debe5e82951afc8f963e2b7f0bf21486256dc312dcb6524f584957d4be585f848468709320aa40c7dffb9e4cc7a30c5efe6202909919078967f9f0b1a40317214f5dac1e11a38e4487666ae01c232967e3eea6344dbd4a0c4e29384f4377eca618974386e80faa353f8f4f984ac8f592ab61e604bf46c23bf69cec44f4f7630f1354edff0413410a9435401c4697bc7f5c24a0db54cba107e4f42d4e77d5cd6fea96b2500fcdbe4503de7c20aff06c0169a074cbd6c8668de1518a49768e8e33f3289a38346ea86a7516cd69473f288bceb70b25c045475c8007743d631464d76158552d08e7a52de7e7ed6953f7a9e7584c1f53ef7ad7e346b79837e0651a3b5f76e295ea91c87e31859166cdc119ad22b318638194557540fdf883762287778afe97aabaddd1bcbc29785696b4939b7ecc5594ea6bce4d594685755dcc5d74fdb89629e96bf1242a19e1d913c545c05194e5f44d62bba09e704c4c0dae81c988e05e40165b593e4701ee6c12eb37861d46ca4b05a7b5f57f3e305cf7e9ff462aa9fc9a380719341597509dbc0ec2ec8527d78a8721882458d436d4ad464c3efe7ca6dcab8ff3774ee14a41be105293e81bc0beac3"}) (async) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r3, 0xffffffffffffff54, 0xb3}) 18:05:47 executing program 0: openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xffffffff, 0x1, 0x0, "111146492cdc2128dc4ce580c94a17a500d19bedec00", 0x485e356f}) 18:05:47 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x4480, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffffffff0de9}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:47 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x4480, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffffffff0de9}) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) (rerun: 32) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:47 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x4480, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xffffffffffff0de9}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:47 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x185362, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:48 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(0x0) open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) unlink(&(0x7f0000000180)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x2, 0x0) 18:05:48 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0xfffffff9, 0x3, 0x3, "860960fdb13465274052a900d018d5177b2a9ceb4f82c7dc79e6f5e6059fded7", 0x32314d59}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)) 18:05:48 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x185362, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:48 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) mkdir(&(0x7f0000000100)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000001840)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) chdir(&(0x7f0000000540)='./bus\x00') open(&(0x7f0000000140)='./file0\x00', 0x14dc81, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x4c, 0x0) 18:05:48 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x185362, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1, 0xffffffffffffff54, 0xb3}) 18:05:48 executing program 0: r0 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0xfffffff9, 0x3, 0x3, "860960fdb13465274 VM DIAGNOSIS: 18:05:43 Registers: info registers vcpu 0 CPU#0 RAX=000001b8c430fff4 RBX=ffff88806b628240 RCX=00000000000006e0 RDX=00000000000001b8 RSI=ffff88806b628240 RDI=0000000000196ca5 RBP=0000000000196ca5 RSP=ffffc90000007ec8 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=ffffc90000007ff8 R12=0000000000000000 R13=0000000000000019 R14=0000000000000000 R15=000000a911021bb5 RIP=ffffffff8137e115 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4ec2a66d58 CR3=0000000128cc1000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffefff0 Opmask01=0000000000000000 Opmask02=00000000fffffc0f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ec1cc7da6 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ec1cc7db3 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ec1cc7dad ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ec1cc7dc1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ec1cc7e47 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ec1cc7f25 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4ec1d7c840 00007f4ec1d7c848 00007f4ec1d7c840 00007f4ec28cb020 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000068 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88806b736de8 RCX=ffffffff816780c5 RDX=0000000000000000 RSI=ffffffff8ae90f60 RDI=ffffffff8c5cba48 RBP=0000000000000001 RSP=ffffc9000424f7f0 R8 =0000000000000000 R9 =fffffbfff1d9b35a R10=ffffffff8ecd9ad7 R11=ffff88807ffda710 R12=ffff888037c6bac0 R13=ffff888037c6b8d8 R14=0000000000000000 R15=0000000000001000 RIP=ffffffff816f58f5 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4ec2aa86c0 ffffffff 00c00000 GS =0000 ffff88806b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020afc000 CR3=0000000128cc1000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffefff0 Opmask01=0000000000000000 Opmask02=00000000fffffc0f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c31656c69662f2e 3d7269646b726f77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7da6 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7db3 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7dad ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7dc1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7e47 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7f25 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65726964203b7325 3d656c696620676e 69736f6c630a0000 000000006e65706f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000002f787c RBX=0000000000000002 RCX=ffffffff8a3d78ce RDX=ffffed100d706dbe RSI=ffffffff8ae90f60 RDI=ffffffff8161d36e RBP=ffffed1002a57898 RSP=ffffc90000387e08 R8 =0000000000000000 R9 =ffffed100d706dbd R10=ffff88806b836deb R11=0000000000000000 R12=0000000000000002 R13=ffff8880152bc4c0 R14=ffffffff8ecd9ad0 R15=0000000000000000 RIP=ffffffff8a3d8b1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000021000000 CR3=0000000123431000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffefff0 Opmask01=0000000000000000 Opmask02=00000000ef77ffdf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7da6 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7db3 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7dad ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7dc1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7e47 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7f25 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f007137c840 00007f007137c848 00007f007137c840 00007f0071ecb020 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff849b0685 RDI=ffffffff925600a0 RBP=ffffffff92560060 RSP=ffffc900043b6a98 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3138383866666666 R12=0000000000000000 R13=000000000000000a R14=ffffffff849b0620 R15=0000000000000000 RIP=ffffffff849b06af RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f4ec2a666c0 ffffffff 00c00000 GS =0000 ffff88806b900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4ec1d0652e CR3=0000000128cc1000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffefff0 Opmask01=0000000000000000 Opmask02=00000000fffffc0f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c31656c69662f2e 3d7269646b726f77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7da6 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7db3 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7dad ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7dc1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7e47 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00712c7f25 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65726964203b7325 3d656c696620676e 69736f6c630a0000 000000006e65706f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e006a64615f65 726f63735f6d6f6f 2f666c65732f636f 72702f0030303031 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b004f41445f40 574a46565f484a4a 0a434940560a464a 57550a0015151514 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000