Warning: Permanently added '[localhost]:9003' (ECDSA) to the list of known hosts. 2022/09/30 06:25:47 fuzzer started 2022/09/30 06:25:48 dialing manager at localhost:40535 syzkaller login: [ 44.111207] cgroup: Unknown subsys name 'net' [ 44.252907] cgroup: Unknown subsys name 'rlimit' 2022/09/30 06:26:03 syscalls: 2215 2022/09/30 06:26:03 code coverage: enabled 2022/09/30 06:26:03 comparison tracing: enabled 2022/09/30 06:26:03 extra coverage: enabled 2022/09/30 06:26:03 setuid sandbox: enabled 2022/09/30 06:26:03 namespace sandbox: enabled 2022/09/30 06:26:03 Android sandbox: enabled 2022/09/30 06:26:03 fault injection: enabled 2022/09/30 06:26:03 leak checking: enabled 2022/09/30 06:26:03 net packet injection: enabled 2022/09/30 06:26:03 net device setup: enabled 2022/09/30 06:26:03 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 06:26:03 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 06:26:03 USB emulation: enabled 2022/09/30 06:26:03 hci packet injection: enabled 2022/09/30 06:26:03 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 06:26:03 802.15.4 emulation: enabled 2022/09/30 06:26:03 fetching corpus: 50, signal 23047/24808 (executing program) 2022/09/30 06:26:03 fetching corpus: 100, signal 37975/41286 (executing program) 2022/09/30 06:26:03 fetching corpus: 150, signal 45327/50049 (executing program) 2022/09/30 06:26:04 fetching corpus: 200, signal 55017/60917 (executing program) 2022/09/30 06:26:04 fetching corpus: 250, signal 59154/66303 (executing program) 2022/09/30 06:26:04 fetching corpus: 300, signal 66277/74468 (executing program) 2022/09/30 06:26:04 fetching corpus: 350, signal 69820/79130 (executing program) 2022/09/30 06:26:04 fetching corpus: 400, signal 72980/83318 (executing program) 2022/09/30 06:26:04 fetching corpus: 450, signal 76259/87624 (executing program) 2022/09/30 06:26:04 fetching corpus: 500, signal 79892/92138 (executing program) 2022/09/30 06:26:04 fetching corpus: 550, signal 84494/97553 (executing program) 2022/09/30 06:26:05 fetching corpus: 600, signal 86989/100944 (executing program) 2022/09/30 06:26:05 fetching corpus: 650, signal 89329/104192 (executing program) 2022/09/30 06:26:05 fetching corpus: 700, signal 91997/107642 (executing program) 2022/09/30 06:26:05 fetching corpus: 750, signal 93518/110039 (executing program) 2022/09/30 06:26:05 fetching corpus: 800, signal 96614/113791 (executing program) 2022/09/30 06:26:05 fetching corpus: 850, signal 99101/116944 (executing program) 2022/09/30 06:26:05 fetching corpus: 900, signal 102389/120678 (executing program) 2022/09/30 06:26:05 fetching corpus: 950, signal 104424/123406 (executing program) 2022/09/30 06:26:05 fetching corpus: 1000, signal 107483/126881 (executing program) 2022/09/30 06:26:06 fetching corpus: 1050, signal 110704/130425 (executing program) 2022/09/30 06:26:06 fetching corpus: 1100, signal 112339/132672 (executing program) 2022/09/30 06:26:06 fetching corpus: 1150, signal 114261/135074 (executing program) 2022/09/30 06:26:06 fetching corpus: 1200, signal 117098/138145 (executing program) 2022/09/30 06:26:06 fetching corpus: 1250, signal 118801/140294 (executing program) 2022/09/30 06:26:06 fetching corpus: 1300, signal 120225/142229 (executing program) 2022/09/30 06:26:06 fetching corpus: 1350, signal 122439/144757 (executing program) 2022/09/30 06:26:06 fetching corpus: 1400, signal 124113/146785 (executing program) 2022/09/30 06:26:07 fetching corpus: 1450, signal 125442/148564 (executing program) 2022/09/30 06:26:07 fetching corpus: 1500, signal 127134/150595 (executing program) 2022/09/30 06:26:07 fetching corpus: 1550, signal 128193/152103 (executing program) 2022/09/30 06:26:07 fetching corpus: 1600, signal 129858/154055 (executing program) 2022/09/30 06:26:07 fetching corpus: 1650, signal 131316/155806 (executing program) 2022/09/30 06:26:07 fetching corpus: 1700, signal 132596/157382 (executing program) 2022/09/30 06:26:07 fetching corpus: 1750, signal 133870/158950 (executing program) 2022/09/30 06:26:07 fetching corpus: 1800, signal 135361/160670 (executing program) 2022/09/30 06:26:07 fetching corpus: 1850, signal 137005/162438 (executing program) 2022/09/30 06:26:08 fetching corpus: 1900, signal 137977/163713 (executing program) 2022/09/30 06:26:08 fetching corpus: 1950, signal 139096/165077 (executing program) 2022/09/30 06:26:08 fetching corpus: 2000, signal 140320/166439 (executing program) 2022/09/30 06:26:08 fetching corpus: 2050, signal 141567/167858 (executing program) 2022/09/30 06:26:08 fetching corpus: 2100, signal 142256/168947 (executing program) 2022/09/30 06:26:08 fetching corpus: 2150, signal 143451/170261 (executing program) 2022/09/30 06:26:08 fetching corpus: 2200, signal 144157/171316 (executing program) 2022/09/30 06:26:08 fetching corpus: 2250, signal 145047/172430 (executing program) 2022/09/30 06:26:09 fetching corpus: 2300, signal 146996/174092 (executing program) 2022/09/30 06:26:09 fetching corpus: 2350, signal 148416/175452 (executing program) 2022/09/30 06:26:09 fetching corpus: 2400, signal 149198/176483 (executing program) 2022/09/30 06:26:09 fetching corpus: 2450, signal 150266/177568 (executing program) 2022/09/30 06:26:09 fetching corpus: 2500, signal 150851/178441 (executing program) 2022/09/30 06:26:09 fetching corpus: 2550, signal 152276/179700 (executing program) 2022/09/30 06:26:09 fetching corpus: 2600, signal 152834/180541 (executing program) 2022/09/30 06:26:09 fetching corpus: 2650, signal 154106/181698 (executing program) 2022/09/30 06:26:10 fetching corpus: 2700, signal 155254/182752 (executing program) 2022/09/30 06:26:10 fetching corpus: 2750, signal 155940/183560 (executing program) 2022/09/30 06:26:10 fetching corpus: 2800, signal 156888/184546 (executing program) 2022/09/30 06:26:10 fetching corpus: 2850, signal 157639/185357 (executing program) 2022/09/30 06:26:10 fetching corpus: 2900, signal 158470/186209 (executing program) 2022/09/30 06:26:10 fetching corpus: 2950, signal 159705/187220 (executing program) 2022/09/30 06:26:10 fetching corpus: 3000, signal 160803/188146 (executing program) 2022/09/30 06:26:10 fetching corpus: 3050, signal 162086/189135 (executing program) 2022/09/30 06:26:10 fetching corpus: 3100, signal 162897/189905 (executing program) 2022/09/30 06:26:10 fetching corpus: 3150, signal 163684/190675 (executing program) 2022/09/30 06:26:11 fetching corpus: 3200, signal 164277/191328 (executing program) 2022/09/30 06:26:11 fetching corpus: 3250, signal 164905/191962 (executing program) 2022/09/30 06:26:11 fetching corpus: 3300, signal 165612/192651 (executing program) 2022/09/30 06:26:11 fetching corpus: 3350, signal 166567/193369 (executing program) 2022/09/30 06:26:11 fetching corpus: 3400, signal 167169/193969 (executing program) 2022/09/30 06:26:11 fetching corpus: 3450, signal 168244/194700 (executing program) 2022/09/30 06:26:11 fetching corpus: 3500, signal 169856/195628 (executing program) 2022/09/30 06:26:11 fetching corpus: 3550, signal 170644/196255 (executing program) 2022/09/30 06:26:11 fetching corpus: 3600, signal 171488/196900 (executing program) 2022/09/30 06:26:12 fetching corpus: 3650, signal 172164/197473 (executing program) 2022/09/30 06:26:12 fetching corpus: 3700, signal 172916/198019 (executing program) 2022/09/30 06:26:12 fetching corpus: 3750, signal 173735/198629 (executing program) 2022/09/30 06:26:12 fetching corpus: 3800, signal 174428/199136 (executing program) 2022/09/30 06:26:12 fetching corpus: 3850, signal 174936/199622 (executing program) 2022/09/30 06:26:12 fetching corpus: 3900, signal 175333/200010 (executing program) 2022/09/30 06:26:12 fetching corpus: 3950, signal 176911/200701 (executing program) 2022/09/30 06:26:12 fetching corpus: 4000, signal 178106/201541 (executing program) 2022/09/30 06:26:13 fetching corpus: 4050, signal 178672/201966 (executing program) 2022/09/30 06:26:13 fetching corpus: 4100, signal 178927/202303 (executing program) 2022/09/30 06:26:13 fetching corpus: 4150, signal 180109/202846 (executing program) 2022/09/30 06:26:13 fetching corpus: 4200, signal 180895/203262 (executing program) 2022/09/30 06:26:13 fetching corpus: 4250, signal 181443/203657 (executing program) 2022/09/30 06:26:13 fetching corpus: 4300, signal 182209/204052 (executing program) 2022/09/30 06:26:13 fetching corpus: 4350, signal 182922/204412 (executing program) 2022/09/30 06:26:13 fetching corpus: 4400, signal 183600/204752 (executing program) 2022/09/30 06:26:14 fetching corpus: 4450, signal 184376/205107 (executing program) 2022/09/30 06:26:14 fetching corpus: 4500, signal 184888/205381 (executing program) 2022/09/30 06:26:14 fetching corpus: 4550, signal 185573/205683 (executing program) 2022/09/30 06:26:14 fetching corpus: 4600, signal 186208/205982 (executing program) 2022/09/30 06:26:14 fetching corpus: 4650, signal 186827/206224 (executing program) 2022/09/30 06:26:14 fetching corpus: 4700, signal 187834/206844 (executing program) 2022/09/30 06:26:14 fetching corpus: 4750, signal 188257/207064 (executing program) 2022/09/30 06:26:14 fetching corpus: 4800, signal 189274/207512 (executing program) 2022/09/30 06:26:14 fetching corpus: 4850, signal 190342/207724 (executing program) 2022/09/30 06:26:15 fetching corpus: 4871, signal 190739/207925 (executing program) 2022/09/30 06:26:15 fetching corpus: 4871, signal 190739/208100 (executing program) 2022/09/30 06:26:15 fetching corpus: 4871, signal 190739/208295 (executing program) 2022/09/30 06:26:15 fetching corpus: 4871, signal 190739/208478 (executing program) 2022/09/30 06:26:15 fetching corpus: 4871, signal 190739/208667 (executing program) 2022/09/30 06:26:15 fetching corpus: 4871, signal 190739/208749 (executing program) 2022/09/30 06:26:15 fetching corpus: 4871, signal 190739/208749 (executing program) 2022/09/30 06:26:18 starting 8 fuzzer processes 06:26:18 executing program 0: ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x7, 0x1, 0x8}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000040)={0x6, 0x154a40ca}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000001080)={&(0x7f0000000080)=""/4096, 0x1000}) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f00000010c0)={0x6, 0x8000}) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001100)=0x2, 0x4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x4048010) r0 = timerfd_create(0x37ec2a397289c7f3, 0x80800) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000001240)={0x2, 0x2, 0x17}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000001280)=0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001380)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) sendmsg$AUDIT_TRIM(r2, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0xc000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x10, 0x3f6, 0x1, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004}, 0x20008810) socketpair(0x26, 0x6, 0xfc78, &(0x7f00000014c0)={0xffffffffffffffff}) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001600)={&(0x7f0000001540)={0x98, 0x453, 0x400, 0x70bd29, 0x25dfdbfb, "2c8c30f6f780aaa6f5349d15e6ea857c94226c9b32429e70c2bc44e9aa6f1e42322ffbcdeca1de05abfa56b9ed90d03c747d62df2dad36ef114f87e2ca48d1b65d39e94222206bfcc3509eea80f799406c6188ebbb3b4c5dd22d1075466adac401732e6961f39233d29febc2e818371ae3931e9f0dd2d98fbb083ad9f55b67751073340d8705", [""]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$vcsn(&(0x7f0000001680), 0x0, 0x200) r4 = socket$netlink(0x10, 0x3, 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) ioctl$FICLONE(r4, 0x40049409, r5) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", ""]}, 0x24}}, 0x24004040) 06:26:18 executing program 1: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x20, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x885}, 0x8000) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x40040) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x20a000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x1b8, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x33, 0x45, "7e2ebc37c40c7548ac1b43f2aa4be0f2f088524225465edb854d1de386ef8017ea52dca1355c09fe6a4a75fff30c12"}, @NL80211_ATTR_TESTDATA={0xa2, 0x45, "9202d31ad227c4440867b6074296da8f571cf28fcae698f8a3c2548fb877a2eb8fa96e5125e0399ca10c9dc50e11f5bc06f24b612b46ef70a94707243f10f1b09e256429558b34f464d031b028d1b8f50adfe5976ab29c8a6126bc2ebad22eea23eb29d32a4fc95f84e19dcd20f0e54b7fbe181b24cc2142e183b46211fd2f7b950e01cc83377425c426051d06c86a8656d9d0c013497f5a238223239f6d"}, @NL80211_ATTR_TESTDATA={0x3f, 0x45, "6c6cfb0628830c5ff13e8d62b0c23ca067a49dc6b9f009e3d55a7f6cc4d56190b974d92d77b023359a062a90db3cca0645feb8cc698486ea891d05"}, @NL80211_ATTR_TESTDATA={0x83, 0x45, "11652e747c899ad90644e620a5c9fa4f96aef682b801f580225228b6524a51ade61fa5345dba7dabac586fadf94136385668ee16c453feb5cb1a3a354d3a6373042ae62476fb7d3111f1323514ec0bceaf886a30f82ed8a00af9f0cd1472d5834ac990c4c3861a9dd55f295d52143d70437d5d0a6103c693b88a326ec8ddd6"}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40841}, 0x0) r3 = open_tree(r1, &(0x7f0000000580)='./file0\x00', 0x80801) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r2, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$BLKROGET(r3, 0x125e, &(0x7f00000006c0)) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000700)={r3, 0x8, 0x1ff, 0x26}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1dc, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x4d}}}}, [@NL80211_ATTR_IE={0x16, 0x2a, [@mic={0x8c, 0x10, {0x221, "63a1c8eb74f2", @short="64348786c4c06945"}}]}, @NL80211_ATTR_BSS_SELECT={0x44, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x9}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x73}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0xdf}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x7ff}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xa6ca}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x2}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x93}]}, @NL80211_ATTR_BSS_SELECT={0x10, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}, @NL80211_ATTR_KEYS={0xf0, 0x51, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "2107b046a3"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "a7035528f3"}, @NL80211_KEY_SEQ={0xb, 0x4, "a05f50f729168d"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "66a63dcd239e4a18bf1e1177a7"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "19466f17c53f52c68605b52f96"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b70ec6bc475df0e06324b78fac"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f24affb20c6ec58a2ed99f2a91"}]}]}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x70000, {0x8, 0x800, 0x1, 0x800}}}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x3800000, {0x6, 0xea22, 0x25, 0x40}}}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x3}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x1, 0x1, 0x0, {0xff, 0x4, 0x0, 0x2a9, 0x0, 0x1, 0x1, 0x2}, 0x0, 0x3, 0xfd}}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x40040}, 0x8000800) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000e00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x348, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x73}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x2a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x6, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x9}, {0x4, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {}, {0x1, 0x1}, {0x5, 0x4}, {0x3, 0x7}, {0x7, 0x3}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x6, 0x7}, {0x7, 0x2}, {0x1}, {0x5, 0x7}, {0x5, 0x8}, {0x2, 0x1}, {0x3, 0x2}, {0x5}, {0x6, 0x1}, {0x6, 0x7}, {0x3, 0xa}, {0x6, 0x2}, {0x3, 0x3}, {0x6, 0x8}, {0x1, 0x6}]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x3}, {0x3, 0x7}, {0x1, 0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5b0, 0x2, 0x1000, 0x401, 0x8, 0xf517, 0x8]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x5}, {0x6, 0x5}, {0x0, 0x2}, {0x0, 0x4}, {}, {0x7, 0x9}, {0x2}, {0x2, 0x1}, {0x5, 0x7}, {0x3, 0x4}, {0x5, 0xa}, {0x0, 0x5}, {0x4, 0x5}, {0x2, 0x3}, {0x3, 0x6}, {0x1, 0x4}, {0x2, 0x2}, {0x2, 0x4}, {0x6, 0x3}, {0x5, 0x4}, {0x2, 0x1}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x2, 0x8}, {}, {0x5, 0xa}, {0x1, 0x2}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x7}, {0x4}, {0x2, 0xa}, {0x1, 0x9}, {0x7, 0x2}, {0x0, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x9}, {0x7, 0xa}, {0x5, 0x4}, {0x0, 0x7}, {0x1, 0x8}, {0x4, 0x1}, {0x2}, {0x7, 0x3}, {0x5, 0x5}, {0x2, 0xa}, {}, {0x1, 0x7}, {0x7, 0x9}]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x0, 0x4, 0x3, 0x1b, 0x16, 0x5, 0x33, 0xc, 0xc, 0x0, 0xb, 0x24, 0x60, 0x1b, 0x6c, 0xc, 0x2, 0x18, 0x0, 0x1b, 0x48, 0x36, 0x48, 0x60, 0x6, 0xc, 0x60, 0x24, 0x24]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x30, 0x18]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x7ff, 0x81, 0xfa9f, 0x5, 0x9, 0x2]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1000, 0x6, 0x1, 0x9, 0x53, 0x3, 0x1ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x1, 0x4}, {}, {0x0, 0x1}, {0x0, 0x7}, {0x1, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x7f00, 0xed9, 0x9, 0x81, 0x0, 0x401, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x43, 0x1, 0x7, 0x7, 0x1, 0xffff, 0x4, 0x45e4]}}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x7}, {0x1, 0x3}, {0x3, 0xa}, {0x7, 0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0x4}, {0x0, 0x2}, {0x1, 0x9}, {0x3}, {0x1, 0x1}, {0x6, 0x9}, {0x1, 0x4}, {0x5, 0x4}, {0x3, 0x7}, {0x0, 0x6}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x4}, {0x7, 0x8}, {0x1}, {0x1, 0x2}, {0x7, 0x5}, {0x7, 0x1}, {0x3, 0x4}, {0x1, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x5}, {0x4, 0x1}, {0x4}, {0x7, 0x8}, {0x0, 0x2}, {0x0, 0x1}, {}, {}, {0x0, 0x7}, {0x4}, {0x6, 0x8}, {0x7, 0x9}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x5}, {0x2, 0x8}, {0x1, 0x3}, {0x3, 0x6}, {0x6, 0x9}, {0x7}, {0x1, 0x1}, {0x4, 0xa}, {0x1, 0x3}, {0x1, 0x6}, {0x2, 0x3}, {0x3, 0xa}, {0x1, 0x2}, {0x6}, {0x2, 0x9}, {0x4, 0x5}, {0x2, 0x1}, {0x4, 0x3}, {0x0, 0x8}, {0x2, 0xa}, {0x2, 0x1}, {0x2, 0x3}, {0x5, 0x4}, {0x2, 0x7}, {0x1, 0xa}, {0x7, 0x9}, {0x6, 0x2}, {0x6, 0x7}, {0x4, 0x9}, {0x1, 0x6}, {0x4, 0x9}, {0x3, 0x3}, {0x4, 0x7}, {0x6, 0x8}, {0x3, 0xa}, {0x7, 0x7}, {0x2, 0x7}, {0x3, 0x7}, {0x0, 0x3}, {0x7, 0x8}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0x8000, 0x9, 0x7, 0x7f, 0x1, 0x49ab]}}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x16, 0x16, 0x12, 0x3, 0x2f, 0xc, 0x6c, 0xb, 0x36, 0x4, 0x16, 0x1b, 0xb, 0x30, 0x60, 0xb, 0x24, 0x6c, 0x4, 0x48, 0x5, 0x4, 0x6, 0x48, 0x9, 0x39, 0x24, 0x68]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x8}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x9}, {0x5, 0x6}, {0x7, 0x5}, {0x0, 0x1}, {0x4, 0x3}, {0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x1, 0x5}, {0x3, 0x2}, {0x2, 0x6}, {0x6, 0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x6, 0xa}, {0x5}, {0x2, 0x3}, {0x1, 0x7}, {0x2, 0x5}, {0x4, 0x5}, {0x3, 0x6}, {0x7, 0x9}, {0x0, 0xa}, {0x2, 0x4}, {0x2, 0xa}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x6}, {0x5, 0x2}, {0x5, 0x8}, {0x3, 0x3}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x7, 0x6}, {0x7, 0x1}, {0x2, 0x4}, {0x1, 0xa}, {}, {0x0, 0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x5}, {0x2, 0x2}, {0x6, 0x6}, {0x7, 0x4}, {0x5, 0x5}, {0x5, 0x9}, {0x0, 0x5}, {0x6, 0x8}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x5}, {0x0, 0x1b}, {0x2, 0x9}, {0x1, 0xa}, {0x7, 0x1}, {0x7}, {0x5, 0x6}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x6, 0x0, 0x6c, 0x5c, 0x2, 0x12, 0xb, 0x5, 0x24, 0x4, 0x1b, 0x9, 0x9, 0x12, 0x6c, 0x18, 0x1b, 0x5, 0x18, 0x3, 0x16, 0x3, 0x36, 0x24, 0x4, 0x527a0b24fec27db6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x71, 0x3, 0xfff, 0xc, 0x6, 0x0, 0x80]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0x60, 0x4, 0x6c, 0x2, 0x48, 0x2, 0x1, 0x48, 0x36, 0x9, 0x24, 0x6c, 0x16, 0x60, 0xc, 0x6, 0xd, 0x5, 0x1b, 0x60, 0x5]}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x14}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_SETUP={0x3c, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x7}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}]}, 0x348}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8}, @val={0xc, 0x99, {0x8, 0xe}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000087}, 0x20000004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x4c, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x8}, @IEEE802154_ATTR_CAPABILITY={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x9000) mknod(&(0x7f00000010c0)='./file0\x00', 0x8000, 0x4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x54, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80000000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}, @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x4c, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x400, 0x5d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x15, 0x34, @random="be49ed4eabd1ef0b689208ea010a7debc6"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40002}, 0x4000) [ 73.817065] audit: type=1400 audit(1664519178.083:6): avc: denied { execmem } for pid=286 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 06:26:18 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/virtio_pci_modern_dev', 0x8080, 0x4) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000040)={0x2cf, 0xa982, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000043c0), 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000004400)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004480), r1) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000004580)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004540)={&(0x7f00000044c0)={0x74, r2, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f00000046c0)={&(0x7f00000045c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004680)={&(0x7f0000004600)={0x48, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004740), r0) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000004800)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x80009000}, 0xc, &(0x7f00000047c0)={&(0x7f0000004780)={0x3c, r4, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004881) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000004840), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000004940)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004900)={&(0x7f00000048c0)={0x20, r2, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x52}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000004ac0)={&(0x7f0000004980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004a80)={&(0x7f00000049c0)={0xb0, r5, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x84, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x235c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d754f25}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x547cbf30}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf18d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f79b751}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5499}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xec9c7db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x21af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x460535e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c03af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0f4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bfc9568}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x245}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4015}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000004b40), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000004c40)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004c00)={&(0x7f0000004b80)={0x68, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd4c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000054}, 0x40000) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000004e00)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004dc0)={&(0x7f0000004d00)={0xa0, r8, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:crack_db_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2c}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:mqueue_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x21}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x4854) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f000000bc40)={&(0x7f000000bb00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000bc00)={&(0x7f000000bb80)={0x58, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000091) 06:26:18 executing program 3: prctl$PR_CAPBSET_DROP(0x18, 0x14) prctl$PR_CAPBSET_DROP(0x18, 0x8) prctl$PR_CAPBSET_DROP(0x18, 0x3) prctl$PR_CAPBSET_DROP(0x18, 0x16) prctl$PR_CAPBSET_DROP(0x18, 0x18) prctl$PR_CAPBSET_DROP(0x18, 0xc) prctl$PR_CAPBSET_DROP(0x18, 0x22) prctl$PR_CAPBSET_DROP(0x18, 0x21) prctl$PR_CAPBSET_DROP(0x18, 0x26) prctl$PR_CAPBSET_DROP(0x18, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1e) prctl$PR_CAPBSET_DROP(0x18, 0x10) prctl$PR_CAPBSET_DROP(0x18, 0x21) prctl$PR_CAPBSET_DROP(0x18, 0x1f) prctl$PR_CAPBSET_DROP(0x18, 0x12) prctl$PR_CAPBSET_DROP(0x18, 0x10) prctl$PR_CAPBSET_DROP(0x18, 0xb) prctl$PR_CAPBSET_DROP(0x18, 0x22) prctl$PR_CAPBSET_DROP(0x18, 0x21) prctl$PR_CAPBSET_DROP(0x18, 0x5) 06:26:18 executing program 4: ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000040)={0x2, 0x80000001, 0x92, 0x0, 0x50, "e6e870d10ace51a94a1aa98e1e68b340851c79", 0x120f, 0xfdb}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000080)={0xac36, 0xff, 0x3}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x0, 0x160) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000100)) ioctl$CDROMRESUME(0xffffffffffffffff, 0x5302) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000140)={{r2}, {@void, @max}}) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x16, 0x7, 0x1, 0x0, "3d06640a5672202c4cd47ba8e253b16046dc"}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x7c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x806}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4040801) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000380)={r2, 0x5a81, 0x10001, 0x4}) ioctl$CDROMREADRAW(r3, 0x5314, &(0x7f00000003c0)={0x3, 0x2, 0x9, 0x7, 0x8f, 0x3f}) ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000e40)={0x7, 0x6, 0x9, 0x80, 0x6, 0xab}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000001900)={0x9, 0x3}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001940), 0x224000, 0x0) r5 = socket$inet6(0xa, 0x1, 0x1000) fadvise64(r5, 0x3, 0x200, 0x0) ioctl$TIOCGICOUNT(r4, 0x545d, 0x0) 06:26:18 executing program 5: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) ioctl$FIOCLEX(r1, 0x5451) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder-control\x00', 0x800, 0x0) fgetxattr(r2, &(0x7f00000001c0)=@random={'security.', '/proc/thread-self\x00'}, &(0x7f0000000200)=""/175, 0xaf) write$binfmt_misc(r1, &(0x7f00000002c0)={'syz1', "4c07b0828680bdff1d687888b508bb030c3356a51e6991a6b253ca103ccc1f76df7ed4e2ca021eefda56021b72e64c3d8f1d8ba61c5c42cbc791e6ce5647227ab2c0468000f7bc3aa6d7059c314fcba7fb8f3cfdd097d46f5447263dd16005c02e8610e9b7205617c021703971b2d195a3ce2ba2616842151f0536b9a5cd0da0f53e4ff8c88a5b2ae753af1223a84289bfcd3b564045d1d9b1be1237cf24d3ed71677ffcf085c170f887b8c2fb48b4450f88f9aa7e4925a625e4a38a98172d6ed2e6715dbef341ff8d0584436dafed89973a51ce6764a1c69ad427e26b4c6786019276751f175889efa7ca07efb53c0d04d72fcfe75ed1a43c62cb572ef54283cc247eb85e69327fab8d844a2d9a5d55288e0f7e2bce20b511404578a8bc581e3f706d6a45cf9228cfc4f4cfce7340cca8f08a70d677c0ffbe98d99d422b5f0da5bf61d20c196852a3f26788da13de39e4491fbfc407da090d1328c9f26acba581c21dc7fa15be5902ea25b9a2f87a6b2fd018569f160568635d4ec160c8d3e223da541d60bca7617cabc62ed608884f4a29871e8c44b1e59fa51d628d9ac4b68166aea719f3329d7bb1b93029ea0a4a0792a7c40250dd8d756d6f65de73a90e5b115d8d0754d4d7aa0157c40a398e92c9006c836c63ac25c8719a3e95ec4066b96575cf4b8e3093536ac0252cc5b7d16135d073116b1fc6b443ddf9094a2f9175978f26a08945a8a69ed1e9e0b3a7e43854e68873d0eeb8f608c7b0b175c57b81cf50de6e307cd3dac8393606fd4fc13c54748782dfb9c39bb78be4d435816553d403aeb366b4006fa17398d39b7a4908dbf85d82db88fb9e27e40d56883c2a4094cca5408207f771869cddd1ae6dd8d8d7683b308bbb70adccfb6285c26f5ae904b3e358be06dfbf6579c1a7ac056300ae807079a2876ef2627a1d76f8833a1090aa8815497e58bda4424eb25942c046be647e3eed6286e4a1ee8a902fab39d0177b5fe558679daee5a6e017af094ddc87b4bef54969f3dce1bbfc9217d983d119f9340dc88e94787783bee6d7760034f4bbb5141d67e25266a1904affb22938e031c1f9d2db174e6d06d941bd903f196e420e70c5306a8c492869000e227acaa9b2a57bb4cf7cbe7a4b34609eff5cb5d29db8430ff616a702aba5836d835154b3c9949edb68a96a65bf7a9a1143863d82a4eb0d850af1623af9a28e161f466e879457c7b55b3489227211a8b3de65b94f13f77461371838b7ff45992accac484642ae0ac3b48a34a29bc9d6c68e174b7474895b19bdc5789803bbec07baab2262818d8ae1f52b615aeb54315431678430506f8ff0528c6ce66e34b87dfec48363855e93fd4765710a5b91830b9adb09e86d1b76eac0cbfbfda607a8eb922c2731a4147b9cabe69fa31091051a6724ad59378578bfad2d3a95da1158aa8ef767e29cd5a947bae2930c96ca7b5449b9bbe0a53311d6605084bdd2e44cebcceb5077fc4962449cda6ce40e33a28fa1ec7a362d1f0828da97ed59b8e121a105b8c22ba1e94674a34a816828d86a3a3fe5862426da00bda21ded475fc8c5caa2b81ecca94475522db08f3323da5635fa589b550f0727b56d523c50d323876d2e5f34092e8128f03412e071ee0542e9eb0900bdcdc58dc4864f42bf8670fe572be1ec4e2228f00f192c67eb30d6576650c3871bc0036912dc9453456741dd6d7f71fc51d690f196e7c31208c440e22556d79ceb9fb6ea4f6df5316c6ce053f26584dfbccbc6d97cc97f3074bf4db4ae4e93daa8a11eb7020b9e4919c08689885578b557e24dcef7186bd27ce48c6a9a6bd5b5cb61dbc30bcd9f84829727fa268d1ad137408b8c79740f362b9dea945638a9720436f193cc3879bc28e0a04a7c127305736a3ae797bd520f71179fb998a139ad7ee1b607ae56f5b022f972d71d6377c6b8e61faddbd5f08bf320a0865509bc2760da1909a5bdbafab79d24e878afc5024dfa8bbcf7322ccc888533c286cae432d2c271911e07db148c167173c63b40bcc9516ca0f66ef0b5013a208141de6864913a30adfa007b67608dbfed77adbf4b1b7387b9c44766b6c5560ff4bbd339c10f494af229ae207a114d5d6aafd29e1dde99aa799edaa297cc3542a7e10ab0f8544627df974242183330ab556f5a71f65b352bffac2e6df8346ef2dbbbf0daa805c6713d2083845140b09d0a685eee393a2af5d80b713fa9df131a32940196033f52b6754c44700ddc3346d626825fda1618b18e3fb2d81cccbae6bbb2a1c0cd3df9e3fa95c4f7e8ea82704a478f081b4a538afdc191e90247ed74c621d71e586cecf8f60d2c5aad5dd76d8b5240593323aa3d5ea6802a9e09eb40b38a652afb2f6c03b4968f2085846aa7d4c83e8d10d3bc08e5356988443c6481abb2acc164e3a3512a42135b3814c900ea23fafc350dd5b082dbab8faf8b3ae3f5e8cf48145a239a3d261684b68ae9dd7d221b0743ef91713b263b8f916917904756b8d25beba3276fffed1c621d3d349ad2c3f6ff1b7d3736f9c3a92e490a8812a632e18db65f9e3edc4081b25f754c5f5b2cec2b7f96b70824e4968c158093c36040fadad8f014444600a2ab16c0660c9818e153cf052c333fcc75e4cc2ae8f425ba5d087b34d0b49addfcf1dd53436e112a5617af8ac8db12009773cd77ed0bb51d44d47d251796cb60156b996ee79b533ca85598f778716a1d63864a486bc3c4fbb35e69153e09961f3c527fa936bdc6fe6b9d6669539a71e89f919d24233f7601ec0bf28ac3b63b2b1aaa3dae3c9e0e2a737a4b03512dff329e4e59b45055f3df225d0f27df553f95a6474caf235ca4aed1950ee6df926f53e30d3cbeac6348074dda0561239042024f1ba8da8a578296749cad58441dddefa31d9c3ebe76783a27873a4b2b3136752b0abc08f800bf657dfd003e18638642f746096f6a083394edfc75ca88e0b7455fa8da73eb4295ff5dd9738369b31ee8986fe0596748164910369af6e5c37581e4a815777f574f96b0b83ea7347ce208d5305fcf2efe5eebd35bde21c8e95f9752d7246a82566aa3567ffe72fd22080a0af57eb3a17b9dea3fe7a84e6dc4b6da2a3fb9911f924623d5c9771aa47dbb6e3c090c6565e85e86cba8974a64e95f69d189140d6e6bce7e1d365e7c888448252d6198b2745e752d83e06643f95f5a59e0fc26c640a2964d1345074d8585d66a33af328d63aec2ceaa0002129b752190d86777e39374a2d51721960d4658f9cb468c802a853d0344fb5840fe8286303828b7e79c29e2717570355deacd06ddc624b6459ffde0cf0879d8219b7b3f7a0af9822fe7ed8d233ad7dd8de605ae1b46d6c8bf6abb42fb685a497d9bf269a03a4ab6ac15f43a0b0d482cb3d12cde871fb02db39e8a258a30246618dce611bd63bb35a6ac2f892b4b1753f29529edcdf5236858b82de296657d2f7013b64322aab621b6e5c039947e3e0eedd482ad912cbff76aa185444ca32c51fe47ce3f5ab8601a5c50d47613b49e7a335f2677eaf6dd9e000118238813539a5b751353e55d90c6d07f4dc89a1e831bd8deb5647cbde02b45928a049e49ab7c5b46561ca513bcb359684a29ac2d6c106a56ac0d5ec021758c9a2309768fe009ab5ac482831375843abcc9946877be475b912c81b9cf87816b37f21dc293d2805d3c400d9b830d716668fca28fa19d88bf002deb925d173540db4b35947015dc3eb17648b06b627fa34ac23ed9700408a1c1b8cf584358e7f46b8b6d7532958377de036353b2296c35ab9e498a072e25a431406c54b5aac4a511b4621d19478c1d7a76e0322d9efedc44fbc3e2f43ef1b2dac6d42cba1a967a1e2dd683a5b5d804d298f72f75d4d56eeaf9d5dbfc5c6af933c4b14730e8c0ea8a4f3362e6107c9cfb48850e3cce0108835882c7de93510c59981b5eef530f7a72fbeab2d9052b6a45a36c3fa7fd99bc6425d0287313229700c3128be11cc919be51a8af78d5035bcf3f0b762f493683fa05f28893c53f8634de0ca7b1750d36af1a3ec2eb57258b55f087db99ccae47acda886ad5d9dacde2c21677cf3340fec917be7139a2a09a5a764e7b6bc58e19d34fee0aac92abea84097013f7f7e2a92888c682d5c844062348e90781fb40831d4efce2e568f26d44e4e12978696e0c338c6d5104e04fc12071bb774d37d9ac929ed79df5f6d5732329922709f65e699787f62b3c3dbc8ca443670f7670c7ac6e5939e4cbd168aa31b11f16dfa28873f80f8305ff637447df44811402658f6c1a147a7e7a390311c5e8167b32a527ba3665eee7450d0364c39dbac614100af53aab8f69f0e7f200ecf23498ff9e673b42a8717354c5126a663f1ecaebfc7919ed35645d4ef309638146290154ce4a389b1e8d05db2e21b59a87c46a3877468d8478b55d45072f0341ba6c44bbc41140d2b078d21652342023ff672934838da849f2c3ecdd4a0df64668d50f9de151293cdcc57deab53e05ae078d84897c329f73bdf13d411c23d633a501b88f026677763b1090b465c52ead52806537eacfd708d51b0fef8ca04fee0b04188f8377b5f8c73348b2d13486ea6bdafe898899a82bd560663044df7d45739cab685e653238dcce6c794e4847ae9405d23f4bd83311429a8a332508a6874c9936bfc70aa0207d3293c607577e88a51b431930816bb5fa47e22636bfdd2b98c975e0ab8b2922112f351ec9ecc598e421aa6dd40d513417836ecfbfbe452e17874eb3ace6036820984b6eca8f04ab075566d056d6cd901ee56c982c3b7b4db6e6b4be47f1b8886e2b8e62707275a7adf9144255807565a2d8ece539ea34e4368a4945fd9c4cf9f2a23bc1e1a5dc3652de0458d4644c2e2e6459432a3c72e4bbae3efa97b3e2bab27fdc9566a879c6ba819b853d491352fea5e6698f32a8f1c3ca509877e898eec74654b19026fac63d876fde1e9d4a05e6d2dfda5ebbb9905a7fd2f66c32c231f158362f754b03c62e7b1da6a8e2838034beb3d46bbc8d2c8fbe7d3bae570bbf7f949f6b82e6281742c3e76e98749c3ff81a278a9b7a7aa71acc243a779918f3ac258420e2c3642192a740e6a757fa825cf5fa0787741d76b8fa004df5470661b71c83d144069d8aaf2c8ab343190118e39f128571db54edc182870bf7100d337f062b799c91fe18087cfbc5c93c2c6418d81b7655705f67db46f9b2aa90c31ed7162db1f8a3507402017645be1789815d50f02ecb442723605332d3a30c006abc343f8764dfd6faa926e7b64024375b6f0fc4e4c46ae93333ff3c60967d1cc3cad1bb399db056a758edfed3261f328ab1b3249ebf876d629b4c24503047d927ca63bc9518646ac01edf084e280ca57f222f9a52524b7fa8c8e70b1f0d2058be91c473199a9a69e0adf4f5680a8560e1db8f842b0bd2d4341b5b536ae54d6c647240cdf9be2265e6821856add320c5ee531356c9ff6008d8bd3d109f4bda90d650c86e494fcf22b27c8a3a4b25295948fc4250a8d9ea8ee923e6eb52bee3397e4a776519dcf064fa08059cb88c63c6077b612d613979bc96e27d5da651f25f3d934df7e5631a09438986b4cdbffcc5daa245e6ec6f3ed168fb51b4222cc280aa1aa9bebabdcff02f78c62488aa719d1f5028cd6cc3e02c8de05de42ea8f8ada586fe7235563911972c474192e10ce3be9cb6b7f423d2948c31a132fc6f7219242ded7506449bbdbf41a0a5f8b57c76088c24a7e7d28a49256f5dd99f010bc657feffc401facc11392a636c486920725763772e024b"}, 0x1004) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000001300), &(0x7f0000001340)='./file1\x00', 0x8, 0x0) pwrite64(r1, &(0x7f0000001380)="30525236521a2c", 0x7, 0x10001) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f00000014c0)={&(0x7f00000013c0)=""/203, 0xcb}) r3 = syz_io_uring_complete(0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001500)={0x0, 0x1, r0, 0x9, 0x80000}) r4 = syz_open_procfs$userns(0x0, &(0x7f0000001540)) write(r4, &(0x7f0000001580)="008210259d9a4e3e236305fe4b75bb328e547e598091c23e89d3a915c55e7cf725162af30dc881948605f73b2d", 0x2d) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0x88, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4400}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000009, 0x80010, r0, 0x10000000) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000001740)=']-&@##${@%\x00', &(0x7f0000001780)='./file1\x00', r0) r5 = fork() syz_open_procfs(r5, &(0x7f00000017c0)='net/stat\x00') 06:26:18 executing program 6: prlimit64(0x0, 0xf, &(0x7f0000000000)={0xbf1, 0x9}, &(0x7f0000000040)) prlimit64(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x6}, &(0x7f00000000c0)) r0 = fork() prlimit64(r0, 0x4, &(0x7f0000000100)={0x2}, 0x0) move_pages(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x6) r1 = getpgid(r0) waitid(0x2, r1, &(0x7f00000001c0), 0x80000000, 0x0) getrlimit(0x7, &(0x7f0000000240)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ff8000/0x4000)=nil) getrlimit(0xc, &(0x7f0000000280)) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x1ff) waitid(0x2, r1, &(0x7f00000002c0), 0x1000000, &(0x7f0000000340)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)=""/110, 0x6e}], 0x1}}, {{&(0x7f0000000540), 0x6e, &(0x7f0000000840)=[{&(0x7f00000005c0)=""/27, 0x1b}, {&(0x7f0000000600)=""/102, 0x66}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000000740)=""/253, 0xfd}], 0x4, &(0x7f0000000880)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000900)=""/195, 0xc3}, {&(0x7f0000000a00)=""/95, 0x5f}, {&(0x7f0000000a80)=""/221, 0xdd}, {&(0x7f0000000b80)=""/90, 0x5a}, {&(0x7f0000000c00)=""/233, 0xe9}, {&(0x7f0000000d00)=""/12, 0xc}, {&(0x7f0000000d40)=""/119, 0x77}], 0x7, &(0x7f0000000e40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x98}}], 0x3, 0x4001a100, &(0x7f0000000fc0)={0x77359400}) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001000)={0x16c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x800c881}, 0x4004044) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) recvmsg$unix(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001200)=""/175, 0xaf}, {&(0x7f00000012c0)=""/99, 0x63}, {&(0x7f0000001340)=""/247, 0xf7}, {&(0x7f0000001440)=""/35, 0x23}, {&(0x7f0000001480)=""/119, 0x77}, {&(0x7f0000001500)=""/40, 0x28}, {&(0x7f0000001540)=""/180, 0xb4}, {&(0x7f0000001600)=""/241, 0xf1}, {&(0x7f0000001700)=""/108, 0x6c}, {&(0x7f0000001780)=""/96, 0x60}], 0xa, &(0x7f00000018c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x60}, 0x2100) prlimit64(r5, 0x6, &(0x7f0000001980)={0x7}, 0x0) getrlimit(0x0, &(0x7f00000019c0)) prlimit64(0x0, 0x7, 0x0, &(0x7f0000001d40)) 06:26:18 executing program 7: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0x3, 0x3f, {0x3f, 0x21, "c9c2104c38ff509d19967ebe91775ab889a40c7944be617b35e336fa717030e1747705ff86f4795e3e9c5031cf0c0fd39dae2bacced23ec08f6c8c3923"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x1c, &(0x7f0000000100)={0x40, 0xb, 0x36, "0a6ff204416d28e196c118c4b9558b0ea24df2a68892a7044e48332f26ad140fa16aa7f8d0eb7a7ed1123ceb699379e1007c3b0bda7b"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x62}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xb}}) syz_usb_ep_write(0xffffffffffffffff, 0x7, 0x6b, &(0x7f0000000200)="6167a5a0a9136c485dc36e502d2105a8199797b81d25d53095e807a101ef5b6e8f3f2c583970127dae856ccf0243c238ddc07617891fdcacbe2bab83a76fb3cafdc2f363402b31db4bd82809ee4b98e8bddfb7dd6406a5a1b034f1e2dec78507cb1564e9795efb8c1dbb91") syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x73, &(0x7f0000000280)=""/115) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000300)={0x20, 0x2, 0x71, {0x71, 0x7, "9bfc306ecaccb77145d321f574319f500a728ce00f791a1dc1ff4fd49987d66723ee2e0c0cdfde30d58b086ae4335d75571dae0bb2d2ca6a2ff7c6f6e44af9eb0aa5cff43ef7e6a3bf9e34ed5b47cca52d44fc38715590937140626309bcc353475fe7f96495517ac82ce01273947c"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x1c, &(0x7f0000000400)={0x40, 0x10, 0xaa, "10a3a164e8cf91a316adeef915eeb3985378a76dcc70af8f22e151f410a66085096b062c5cb5b052ae9d5fb0f39f115d52128cfa557514a598a9503b23921fdaff080a4d867709f0549a7099322985f648fd1cc2bac3ce8b23cd101766f593cafac62e26907ce7dc11378021bcb1351f6a5c3ae96cb9a40350e5a287d710f693749979a93bae257baa3ed6f7d7eb116c57b63d3f44d841c04c9abe6e4b7e3ae7438ba70b856f2b56ca89"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x42}}) syz_usb_ep_read(0xffffffffffffffff, 0xff, 0x92, &(0x7f0000000580)=""/146) r0 = syz_usb_connect(0x5, 0x101, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0x22, 0xde, 0x14, 0x40, 0x1e0e, 0x9200, 0x62aa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xef, 0x1, 0x4, 0x9a, 0x80, 0x6, [{{0x9, 0x4, 0xbd, 0xff, 0x10, 0xff, 0xff, 0xff, 0x7, [], [{{0x9, 0x5, 0xd, 0x478d3c9c003b9ef, 0x8, 0x1, 0x7f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x3ff}]}}, {{0x9, 0x5, 0x6, 0xe, 0x20, 0xb9, 0x23, 0x95}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x0, 0x8, 0x7}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x2, 0x82, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x4}]}}, {{0x9, 0x5, 0x39281cb08f88947e, 0xc, 0x8, 0x7, 0x20, 0x3f}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x1, 0x7f, 0xe3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x9}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0xcc, 0x4, 0x81}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0xe, 0x81, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x0, 0x4, 0x7}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x40, 0x0, 0x3f}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x0, 0x9, 0x7f}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x82, 0x4c, 0x6}}, {{0x9, 0x5, 0x3, 0xc, 0x20, 0x9, 0x0, 0x2, [@generic={0x23, 0x11, "77d310bf332b79a39d3c27af3b74101fcf2a67e434eadcb36c577f066335df7111"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x7, 0x1, 0x3}}, {{0x9, 0x5, 0xc, 0xc, 0x8, 0x4, 0x3f, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x4000}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x1, 0xc0, 0x1}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0x69, 0x6, 0x0, 0x10, 0x55}, 0x3b, &(0x7f00000007c0)={0x5, 0xf, 0x3b, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2c, 0x8, 0x7, 0x1ff}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "d9c8ce522a5cae09f55169daf4bcb87e"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x9f, 0x9d, 0x6, 0x4}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xd9, 0xef, 0x2}]}, 0x7, [{0x9e, &(0x7f0000000800)=@string={0x9e, 0x3, "1043c225ae426f5be01588bde7af6450afdbb244f30e18c9ec00eb357220baadc8fa55662c65ebff9bebd3dd52bb21274effbee9a1f26fb2a8fa31b0c6bd8e176d0750b4116f34fd307f255c0d4279ba1f8b54937e329d1bf0e9a31dc55c38ecdefba7e1ecce78d1a0ecd3f22cccdea89af5a2559b44e14362eda1468910bdc0b6ad2be9d876d269ec6e17924dd8b914a7203d2d708b32ae39adf52d"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x2809}}, {0xc7, &(0x7f0000000900)=@string={0xc7, 0x3, "c7da1e6cb453b74b76108619d065e7fe2f6ea5a79de624ea5dca0645a43cb1eace6607831efd48f14928000bf067fb39d0506913419504217dc7ea4fbf8f4292a1653aa740fd5c293907d18b525e19bdcb22cdc6acc40e054d563dfc24f822786ca65af47ff0a1dbec3c0c157d7505877ecbd5b5e7228c3100745d47291704cd4cf566a488719acff521d9192490934a20e9779e4034d2c2855c2d71d07fd720f09e667c6030921f9bdcb1a9cb4fe49f34ce9646c34f8e0e718d9b446c89018aba3ea2f51d"}}, {0xc8, &(0x7f0000000a00)=@string={0xc8, 0x3, "a54c3d4577eb2853fc92dc4260e8af908871d3815d122b34f750e13421aae889817ea6001e4aa19039e7617cf8270548168e120959e552925b8c09eacfb4e534473e100a582cce28a0ff9c1d1ff6b8b1b75a86ce00e4e1679821b4157f5347638363ea11b0b94551a2816c766f1043ced656c9102ebaa799542daf821ebe4352f33bbf0feb26eb4f56a08cffc99b31590002fb681bd89080bfb0a074936130aa0547f17662fc6c285fd9c4c98948acf67831497d3b74612d0d863fe91ed5df5a27eb40d6b7af"}}, {0x86, &(0x7f0000000b00)=@string={0x86, 0x3, "8fda306766b3cc4ae2900fe9d178f2e2a273ff8e169e9d4f1ff80fb9d0b59e6c78453630de9ed6570dbf3f804957542d72b3debe4c40df377ba1ca77ba29d8683d1b37a77e1e0b78a33176861327dae498648736af4f7213c6f010ba2665a8179fc33917efda359015351b7b20b696f5a3f5b247909ca90c44a774d63b3579516622bc92"}}, {0x2d, &(0x7f0000000bc0)=@string={0x2d, 0x3, "8329ccbafc922c68fbc891ae530df6cbb04446cf08dfaac5d24009f48f6d3b61e31aa5b36934cf453084b7"}}, {0x4f, &(0x7f0000000c00)=@string={0x4f, 0x3, "42ddf3558f8153ddb9fc0917182b519e40b2000abb0af4444b40abb873d168e3674b4635285d96c55ff12c36efa983a261306374ab7dd60dbbd271ad02689945b60bc5cb414f1c440a9b9dcaa9"}}]}) syz_usb_disconnect(r0) syz_usb_ep_read(r0, 0x81, 0xf2, &(0x7f0000000d00)=""/242) syz_usb_ep_write(r0, 0x1, 0xb, &(0x7f0000000e00)="c296729764b614c4348e0d") r1 = syz_usb_connect(0x2, 0x8f1, &(0x7f0000000e40)={{0x12, 0x1, 0x300, 0xa0, 0x7b, 0x60, 0xf7, 0x50d, 0x1102, 0xe01f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8df, 0x3, 0xf9, 0xc8, 0x0, 0x7, [{{0x9, 0x4, 0xd, 0x8, 0xe, 0x8c, 0x9f, 0x87, 0x4, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "5e16"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x2a4b, 0x8, 0x3, 0x61}, {0x6, 0x24, 0x1a, 0xf3e9, 0x4}, [@acm={0x4, 0x24, 0x2, 0x8}, @mdlm_detail={0xeb, 0x24, 0x13, 0x1, "cc6fbbca8b73356d5aab84abdf9bcab1c76d35cccef21e0d203a946f4fe1996b22929f3050552935aaca0fdaa1095728143a04f16312f99f68c749b2df56dc721618a655b09adaba335ca68205f518f4461dfea14703cb78c7ff5ea519f9f0d13a024eee900568f666a854a76a70bfcff3e6ea6c383bee6f463c30ddf06739984b52d76b5b130438f86f048c15ed89fe18560028ea6d3d9a87d1f76b19dc3f28958f840f7a06d440aeebde794f0a4d41243274780d4de2252d1bd623d8f0940982b6e90082016f3feaf9a0b165c00f3e1ee0ee3db59ef0b444b536b3416594ec99626fb381c20c"}]}], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x5, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x3}]}}, {{0x9, 0x5, 0x5, 0xc, 0x0, 0xa6, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x40}]}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x3, 0x7a, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xcd}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0xf4, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x1}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x7f, 0x8, 0x6, [@generic={0x85, 0x4, "9a9b9d086c6ebce6dfb3a9f1794e700bb2e8cb22f8ea7ac87e1dd46014b9a5a3bee147361c4f434a4679000c60380cdb5b131f0dbb989973ab0d3016498901f8a30f4535645dad25e721d364506016af09c311ce35e6d26bff5ca22c254b38a5d2ce110020ad0e1a8b30e823f9e2f4b6eb8ccc5996a455cb58eb5b50144195cd076f60"}, @generic={0x1e, 0x9, "46f24b68ba9d793f1e25f4b4d9a90d9a1f4462bde1c014169e922fa8"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x7f, 0xbf, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xed, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x43, 0x6, 0x2}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x81, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x5, 0xc50}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x2, 0x1, 0x8, [@generic={0x44, 0x22, "08a054e1873a2322f404482042d79828dd7305597ec13a2f0332702ea9d499abc56e12652ea60fc85b5884249207811fff1c552d0d806c20ba0ac9cd954d85aa74d6"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0xe2, 0xfd, 0x0, [@generic={0x25, 0xe, "abd48a1c39597c17877475646d4b086cc46b91e52679ab288fffa95c10e08470085b0f"}, @generic={0x47, 0x8, "5c6c8bf3f48d3058960b6e60c016b924531458669753523942a28f9ff3bd05b6049b426174daa10c6315911373d56f335be7086161ccf638bfeb8c34e6d1971b0dd24ee68b"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x40, 0x3, 0x0, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xcc, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xd4, 0x3d}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x6, 0x3, 0x0, 0x1f, 0x81, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x3ae0}, @generic={0xa4, 0x7, "6a194e4c080b2bc3873f422e2ac45665fdc166df704c0cde48f3985b6e756d3e67c0397c95fb5bc0cab737e9fa73d31d9e7b54f689dfb09adaa8450ff26ac7fe5902c8e3da644e2a15354f3c131eba928ccc89ad2f4409a450f916104ba18afdc92b63caeacf6ea05cac25547d22727e69c7788833053923085db6fa8dd60a8e05b09815ecd0a288496f8dae593aa3f0506e8988cd13ac54c2d8230f40ba9dfaa8e5"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x1, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3f, 0xff01}, @generic={0x8, 0x22, "535af6055569"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x5b, 0x81, 0x80, [@generic={0x2, 0x1}]}}]}}, {{0x9, 0x4, 0x4b, 0xa7, 0x7, 0x3, 0xab, 0x2, 0x60, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "caef"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xa, 0xfee7, 0xfff, 0x20}, {0x6, 0x24, 0x1a, 0xc7, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x100}, @dmm={0x7, 0x24, 0x14, 0x3, 0xc0}]}, @uac_control={{0xa, 0x24, 0x1, 0x3f, 0x7f}, [@selector_unit={0x7, 0x24, 0x5, 0x1, 0x2, "ce66"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x3, 0x6, 0x3}]}], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0xff, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x3, 0x7f, 0x3, [@generic={0x9, 0x8, "aab7318917dedd"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x61, 0x3, 0xaf, [@generic={0xa0, 0xd, "377f646858ff29accbab6c0e0e56b37c4b10b59391af049a1d53d822ba6ca1cce70640722fd57be13eae105a4fed12f3f9fefe742666f4737adcd036e1d4dc3db931fec79ccd442477b1c0d3aa323fd00cc4a26c0d60c63fdf3b077f3c8fbf4ed28923d3014ca688eed8ba0cfd0bf449bb67b2b905c318a254a4830794224a1a283771872a9093430e46067848a38d9a0213669f079f77061177fd46e24d"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x1f, 0x0, 0x7}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x4, 0x77, 0x33}}, {{0x9, 0x5, 0x2, 0x1, 0x40, 0x1f, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1f}, @generic={0xc7, 0x7, "98094f7d06c2b1c27858c4f58ebea27d92b61a4f614f12c102b2b06390f0ef06c4c81e40bbcec393bd35a987573f3e51301e515e6c752a24a5926767158b83710b010818e22c3e049e992f50c5234fe743357868af8f1deb6a0e3a721778ca25604233e9eb4e51b4292c3974497f6697a83ce19ed8c40cc578b88d2f11e4a87b440fc616d91d99d3ba564971cc2314e71e52e657a01a454e9f70e77f19a93bd5129743855a27a5f5c67071a45e5783a237961e28d89071b57b28aca1ea800dd8f036785c0b"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xea, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0xfff9}]}}]}}, {{0x9, 0x4, 0x4a, 0x4, 0x9, 0xff, 0xff, 0xff, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "73a125f2a0"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x40, 0x7, 0x32}}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x7, 0x2a, 0x0, [@generic={0xd0, 0xc, "9ee67af4db7034add3c44f3a4d5a52167a607ab7e19748cf95bb88b2d7570cdb227858eafafadc247297fba9a0a13c20337248f48dfe9cb05c7ba8fbed9955f646600fab454988343ec899f14405fa2656366f8f2247e492c592a79a82dd5ebfb9083d7c3d22b820315e1433a200baba2c0b101088654f3872cd5c9705d8c643d4d85b083869837a87a212bc946493682e7c79af177ee60adcf0a0afaae6bde678663f30c4198c14892a1efb1bf36e0bbe7864c732b4b6920a804dda73d363c47511f1927db25bb7ce141c134c26"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}]}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0x7, 0x5, 0x77, [@generic={0x62, 0x4, "9778f3fc01df6f67686f90b9aa03408ce4c0b1b4957511b3a61f47a53903f84997b19830e4ce4ab48a086f6b13675eaec2191de0405b8e67d64bc37773b19a25ab50fb1dd1a5cda18000bd0cd2e480b64651a0166a079e8fde344aec7a8557d3"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x81, 0xf7, 0xd8}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x1, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5}]}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x8, 0x66, 0x7a, [@generic={0xf, 0x23, "ca83b42ab7c31260dd191b520e"}, @generic={0x53, 0x1, "44d4e769d773d5f3b6060d15e87a603e4d5cb8a8391b6f606a746f31e8bc948c6ea6c214d2ac53df63e1024625a77cce5e0b4e53118c5a1030f0ff9c573d8d7038a0b4682fdc1d8932dfafd7fef42ba8fb"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x81, 0x86, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x4}]}}, {{0x9, 0x5, 0x6, 0x1b, 0x0, 0x1, 0x9, 0x3, [@generic={0x75, 0x4, "7112053ca5e1b3a9b2fc2ad05292b8cdadda87463e9edf36fc7c8d6f82e472147c47921e7a26846c4e0145acc632f6db1cdf53de0afd5733062eb159d5cff442ad84808b9064dbe3d35b1394e584914f95594d5af536d12e748ee9696c58d49ba7262dd8ce3ca2e59e4e9e0dbb8136e73671c9"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x94}]}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x8, 0x5, 0x2}}, {{0x9, 0x5, 0xe, 0x12, 0x10, 0x0, 0x24, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9a, 0x9}, @generic={0x29, 0x31, "86d447bb22bf7e3be41b0c737593d96a8b265e20bcfe7fc2fcb40b69ff3f7f80e69749e57eb2b9"}]}}]}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x250, 0xfd, 0xa3, 0x47, 0xe7, 0x2}, 0xc, &(0x7f0000001780)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x8, 0xf303}]}, 0x2, [{0xd0, &(0x7f00000017c0)=@string={0xd0, 0x3, "532fa6d1ba2b9ccd7859a163f12761357573f800454d1c19c9793c836395cfab99bddadbd634d511566db25c1f7608a669df49431e903122d5496f43a63519a15b7998865e6f2948ae12fe9ad3486aa2c46f6ebd6a740c90b957b6d760e241dfa5fc6514b1cb11597a31f754ad7d7d5bc64645fad6060098daf87fbf830853d06865b029eacf32be08098608d0a9b520c9e2d6e6fe350554d98d3770b6db32bb4d98e090c835c056a6cbb04da2a868ed69967025031e1cd3036fed16a7b7f1f6ef5eb3d09be44273e1599d83a280"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x422}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001a80)={0x14, &(0x7f0000001940)={0x20, 0xb, 0xee, {0xee, 0x31, "6dfe297f6cf599f2b1ba192bbc6753fe63d592f82d389be63a4c50361a62fd2ff750b90a520ac19b9bb8a1496677002eba8636e4b176fe994e8e0e44b09be6e49bbb2684fb726a9906989cee325ad4579320f5d08b4ed7d60508691e4f954a9f702ab3dd773dd8f9d2423a174c49c2ec9a26316acb0a8ca854692b93ccff45f7cedf0a28e79f532c181db63aadf26cf4c373bd833ee10143b66ca66d0d999e88a4a952b56fd8bb9b32edb917c52c2789838af8df1e411ac32b8d6d7b70a176740d8a5d6f23c8976c38999ca27ea73cbe8753cbb55285955ecb286ca47b8c317694afad6dfa1375c874f075b1"}}, &(0x7f0000001a40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001bc0)={0x1c, &(0x7f0000001ac0)={0x0, 0x16, 0x60, "5e3239893ccc15302615cabfeee241f3d1692d49a3f4c67f7baf66afaada04e4c6780d0606b79ee52c28b473188c9af41f6d284ca84640fd5b83df25b7de6df5279d52e0a48cb4b7207064cbd7ff53dfd1e318eb079f6154f42543d145d1d527"}, &(0x7f0000001b40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001b80)={0x0, 0x8, 0x1, 0x1f}}) r2 = syz_usb_connect$cdc_ncm(0x2, 0x16a, &(0x7f0000001c00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x158, 0x2, 0x1, 0x81, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "dd2493124c"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x47, 0x9, 0x38}, {0x6, 0x24, 0x1a, 0xffff, 0x4}, [@mdlm_detail={0x66, 0x24, 0x13, 0x0, "329df779f18a8465effcdc38db158305c6e2134683abd84cde9601b630734d170185c309ff0212ba926eb29e5193320f6ea82c2d7e1cc999dc5626db45380ec3eb8b796a0fdf82a7c81c351937be4120efbe5e85809a219d8f8bb2faf57e644b6c4b"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xc0}, @obex={0x5, 0x24, 0x15, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x3, 0x20, 0x7e}, @mdlm_detail={0x7b, 0x24, 0x13, 0x1, "8bef5314136128f3cc22aeab71c3aa3ff0ece2da5235db29d77d9e4c35101819fbe16fd858ea352ee6f0f73248cb56807beb0e8dbf79f6e81d381c54ba16e43bbb74a10deceadbbb62fbe96cbeb7355d12533e9b85fbcb9afa5e5869ffd110e11776a5b39b60103677039c68020599deee9082c9db7ed3"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x4, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xf7, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x76c826cc2da1ea64, 0x80, 0x3f, 0x9}}}}}}}]}}, &(0x7f0000002180)={0xa, &(0x7f0000001d80)={0xa, 0x6, 0x110, 0x7, 0x5, 0x0, 0x40, 0xcf}, 0x10, &(0x7f0000001dc0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x82, 0x7, 0x7, 0x5, 0x27}]}, 0x7, [{0xc2, &(0x7f0000001e00)=@string={0xc2, 0x3, "611b1a18c6d8f84b621f895044340f590b27fb7c1c2733007d71ecee860f237fc2b9fc76eae507605bfd1fcba95f4dce2779c719583d125e6026ffe7ba631221af377ce16b71e1341230c35bd109d2447647b8838f2ef389a7e77d14510789578fba0fc0c948f7d5692534f377a8ccb416dc28e0e47cbc579a15e8bc8876d1942ec71b652b4fa1456522fc152cd8cb50b1a8750c84b1ce241c2f13bc56dc1ea4913eef53a1ee35b3449c450a39fa0cf17c68ec13b292ae91a665d2f439b1513c"}}, {0x14, &(0x7f0000001f00)=@string={0x14, 0x3, "073dda2b9db4a523b5a9e6b048560297287a"}}, {0xc1, &(0x7f0000001f40)=@string={0xc1, 0x3, "be7b501f17f473268d00f826efa60d55b06d9516d2fe7cf97f5b3c2a4481f92c7832fe16910c03449aa73e46384468d77f3756890672413da3692d128abe4a93d3cf87e296cf58e6363e7e2b07fe172b710d9d57f955104a1b951ca67c535e9f5dd649880b81ee3bb7e41173793ceaf573a9b62635105f6fae8e1f8da5d6da024bbdebac96ab23e15b0dcd3fbfb7ff9710327762af7af03ea6b93f291e357bb46f63b75a7490d211fd1d991111b1f92478fc17de8019a3d6c727390d041d57"}}, {0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000002080)=@lang_id={0x4, 0x3, 0x41b}}, {0x7e, &(0x7f00000020c0)=@string={0x7e, 0x3, "d4cd82d13ff14e25caa58a9db54a3624f9ca7dd5cdfa3bd176c2817845401597ea3cca94300b600346a18c017f37e06d2484b52632ed228edefa4d936925e69835116e6c7319c32fbf49cba3e175791865c5b023ed62ab48c5fdbb1d51616fcde7b2630970c9c009fcb1c9dcf8cbad8c12b4494d4cd6fbfb10da797b"}}, {0x24, &(0x7f0000002140)=@string={0x24, 0x3, "cc0b351daf996c53e3c3145ada07bca553c76415b0b47cc9e7551d04882e0112c16d"}}]}) syz_usb_control_io(r2, &(0x7f0000002400)={0x2c, &(0x7f0000002200)={0x20, 0x1, 0x94, {0x94, 0x10, "a7d981ac2e261f365a17f6d391283f088e0d4bb1aca686a733b2391bacf1db24ad1a9b273e002514bc32ded33ba92b4e0f7bf9371199b4878a1dc716fcfb0f47a85b4c3dc7782963fac48cae8e30043ef96cb01ea10390fc5d24118c4fb1186ec17af4c3e93eadcdc57f93b2f5da204e331a1c8d2dfd9d0dbcd0f95c4c708c53e7e7f2247c4d0d45efd466cfa7f9a73fac1e"}}, &(0x7f00000022c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x104b}}, &(0x7f0000002300)={0x0, 0xf, 0x46, {0x5, 0xf, 0x46, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x3, 0x0, 0xfff, [0x3ff0, 0x3f00, 0xff3f0f, 0x0, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "eb274e178a828dcc8f75b9643ff6c1fa"}]}}, &(0x7f0000002380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x6, 0x35, "f70d7040", "85dd5dfc"}}, &(0x7f00000023c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb8, 0x10, 0x0, 0x0, 0x1, 0xd104, 0x4}}}, &(0x7f0000002880)={0x84, &(0x7f0000002440)={0x0, 0x5, 0x72, "8506d83de8452bce8752759a259a5012ff2337b48df5eb0f7cd7758e5c56ab1343b7ff8a49e442580273b709f725f5f1fa87370aa892b25b754b787d90478427c6aced205debd5a198bb41e449cd2056a541942d9d3b0b2c5b199554f7e2cde8b831b88d711ea8dc2f23f3b2d34b603cedc0"}, &(0x7f00000024c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002500)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000002540)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000002580)={0x20, 0x0, 0x4, {0xe0, 0x80}}, &(0x7f00000025c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000002600)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000002640)={0x40, 0xb, 0x2, "857d"}, &(0x7f0000002680)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000026c0)={0x40, 0x13, 0x6}, &(0x7f0000002700)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000002740)={0x40, 0x19, 0x2, "bf52"}, &(0x7f0000002780)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000027c0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000002800)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000002840)={0x40, 0x21, 0x1, 0x7}}) syz_usb_ep_read(r1, 0x20, 0x57, &(0x7f0000002940)=""/87) r3 = syz_usb_connect$cdc_ncm(0x0, 0x8d, &(0x7f00000029c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x2, 0x1, 0x9, 0x10, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1ff, 0xffff, 0x1}, {0x6, 0x24, 0x1a, 0x4, 0x29}, [@mdlm={0x15, 0x24, 0x12, 0xff00}, @country_functional={0x6, 0x24, 0x7, 0x3, 0x5}, @acm={0x4, 0x24, 0x2, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x8b, 0x5, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xa, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x18, 0x8f, 0x3}}}}}}}]}}, &(0x7f0000002c80)={0xa, &(0x7f0000002a80)={0xa, 0x6, 0x0, 0x20, 0x2, 0x7f, 0x8, 0x1}, 0x59, &(0x7f0000002ac0)={0x5, 0xf, 0x59, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x7d, 0x2, 0x81, 0x1, 0x81}, @wireless={0xb, 0x10, 0x1, 0x8, 0x9, 0xff, 0xff, 0xff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x8, 0x7, 0x9, 0xee}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "e5a3e41ec6943a46349c5df1487e80db"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc0, 0x7, 0x7, 0x5, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "76768f6c5ec4f049e05e861d1fa3a45c"}]}, 0x2, [{0x4, &(0x7f0000002b40)=@lang_id={0x4, 0x3, 0xd4e2}}, {0xe2, &(0x7f0000002b80)=@string={0xe2, 0x3, "b3bd20d42962b2c68f17c27080a513478f9c6aa75677177914590caccaf63c05351d89fbb68789172ef11c0e75a914e96b5c0b23721c531c3f30597d87b55a6058aa796e72c6f874bc7566f4ce76351c05804bb8400c22b3b50a6c3e3001d09be924f2392f9293cf737e80b037808f51b3a35520a5a6c9d001abf1a14d5fee6173e143771c46076ea4adc6c46d0823bbf84146847e698ad1929b83e824e978591efc71c7feb7cc92b18213878501d2edf7f6f0f8edb078fe5020152fd6c3dcc5e3a3af3c2f1487da49526238fbdff6fda5b327819b6049a5e10eb53c22dbe0b5"}}]}) syz_usb_ep_write(r3, 0x2, 0xc4, &(0x7f0000002cc0)="a367033fdae32373bb3cc7745f624648343097db82c68d479935740e9051d5cdd501385d28fc59023c378a33ae8b107804f922e2e651ef28b55bd6409ddfea6fd6035f8b5563843447c5708ebebd9001616489c5586b098ff5aec26d4865367dc54713a8ef5deb25133e872a5789287ffb3d7e96f65cf55689e310fc6ec13fd1a13ff343474cc5f16545fce8e86788dda785f832fc88f04e0b7818dba79d32fc64058c5f62a8759d682be23a1b678e4f1ade95f09813ffe4d1338bab3dc437dd38004377") syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000002dc0)=@ready={0x0, 0x0, 0x8, "b9f99e50", {0x1, 0x8001, 0x4, 0x40, 0x81}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000002f40)={0x14, &(0x7f0000002e00)={0x0, 0x9, 0xee, {0xee, 0x8, "b9b98596240e04186fefffccee60a62e4e7662e9e3be02ea08f582fc11bc538ec7b50bbbbfe82dd648ef4a44fc28572af765001f809afcf9de9c2781ef8b5f826d31db0b9d303e230b4fd24ccf093eae6020e3bd12738327d8a3e7d5b00c77beb141c515d92702a0ce39415e00eccd70838df3fb719211a846e867e9dc1e1940416cbd24aa3eeb92c031398713e7d599dd4d09e97f4d82e37a61fc8471009579f9b5fba247e5f44c592eea352ec3dc6256e18c41b9c2001f17d79ea933902303b50eac0b26b41880308a7397cef07a414a77314548c0a7d2ed0cdd2a93f5fd6d506a301fe0ca0ff97baf511f"}}, &(0x7f0000002f00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003080)={0x1c, &(0x7f0000002f80)={0x40, 0x17, 0x63, "008937eeb69980122842d5fc63bbd1b5f8da01e332740f0c74a4f68bcf9885ccd085841e5eccd771a98d3061df167d3faf20603787ca946d6e38aa53b6ec537d10b381595df16828e1156460bda135e73e64a0184638f755abef481d47dc676e9cd642"}, &(0x7f0000003000)={0x0, 0xa, 0x1}, &(0x7f0000003040)={0x0, 0x8, 0x1, 0x3}}) syz_usb_ep_read(r2, 0x80, 0x75, &(0x7f00000030c0)=""/117) [ 75.193481] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.195556] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.198096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.199592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.201355] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.203280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.206397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.208562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.210734] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.212925] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.214379] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.227174] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.232883] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.235926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.238206] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.239774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.240043] Bluetooth: hci1: HCI_REQ-0x0c1a [ 75.242001] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.244131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.248119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.250106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.252590] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.254594] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.256225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.258367] Bluetooth: hci0: HCI_REQ-0x0c1a [ 75.259496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.291791] Bluetooth: hci2: HCI_REQ-0x0c1a [ 75.299803] Bluetooth: hci3: HCI_REQ-0x0c1a [ 75.310403] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 75.312258] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 75.313542] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 75.316007] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 75.317856] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 75.319084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 75.323635] Bluetooth: hci7: HCI_REQ-0x0c1a [ 75.370070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.373880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.377699] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.386716] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.396720] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.406622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.415575] Bluetooth: hci4: HCI_REQ-0x0c1a [ 77.326801] Bluetooth: hci0: command 0x0409 tx timeout [ 77.326814] Bluetooth: hci1: command 0x0409 tx timeout [ 77.327979] Bluetooth: hci3: command 0x0409 tx timeout [ 77.328509] Bluetooth: hci2: command 0x0409 tx timeout [ 77.328687] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 77.329185] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 77.390511] Bluetooth: hci7: command 0x0409 tx timeout [ 77.454524] Bluetooth: hci4: command 0x0409 tx timeout [ 79.374542] Bluetooth: hci2: command 0x041b tx timeout [ 79.374560] Bluetooth: hci3: command 0x041b tx timeout [ 79.375038] Bluetooth: hci1: command 0x041b tx timeout [ 79.375530] Bluetooth: hci0: command 0x041b tx timeout [ 79.439470] Bluetooth: hci7: command 0x041b tx timeout [ 79.503568] Bluetooth: hci4: command 0x041b tx timeout [ 80.471794] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 80.473404] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 80.474335] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 80.476763] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 80.478076] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 80.478963] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 80.484466] Bluetooth: hci6: HCI_REQ-0x0c1a [ 81.422517] Bluetooth: hci0: command 0x040f tx timeout [ 81.424751] Bluetooth: hci1: command 0x040f tx timeout [ 81.424777] Bluetooth: hci3: command 0x040f tx timeout [ 81.425155] Bluetooth: hci2: command 0x040f tx timeout [ 81.487495] Bluetooth: hci7: command 0x040f tx timeout [ 81.551475] Bluetooth: hci4: command 0x040f tx timeout [ 82.319538] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 82.510509] Bluetooth: hci6: command 0x0409 tx timeout [ 83.471087] Bluetooth: hci3: command 0x0419 tx timeout [ 83.471115] Bluetooth: hci2: command 0x0419 tx timeout [ 83.471564] Bluetooth: hci1: command 0x0419 tx timeout [ 83.471987] Bluetooth: hci0: command 0x0419 tx timeout [ 83.534520] Bluetooth: hci7: command 0x0419 tx timeout [ 83.598472] Bluetooth: hci4: command 0x0419 tx timeout [ 84.559564] Bluetooth: hci6: command 0x041b tx timeout [ 84.898380] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.920788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.930298] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.934969] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.937697] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.940169] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.946995] Bluetooth: hci5: HCI_REQ-0x0c1a [ 86.607485] Bluetooth: hci6: command 0x040f tx timeout [ 86.990600] Bluetooth: hci5: command 0x0409 tx timeout [ 88.655502] Bluetooth: hci6: command 0x0419 tx timeout [ 89.038511] Bluetooth: hci5: command 0x041b tx timeout [ 91.086534] Bluetooth: hci5: command 0x040f tx timeout [ 93.134493] Bluetooth: hci5: command 0x0419 tx timeout 06:27:10 executing program 3: prctl$PR_CAPBSET_DROP(0x18, 0x14) prctl$PR_CAPBSET_DROP(0x18, 0x8) prctl$PR_CAPBSET_DROP(0x18, 0x3) prctl$PR_CAPBSET_DROP(0x18, 0x16) prctl$PR_CAPBSET_DROP(0x18, 0x18) prctl$PR_CAPBSET_DROP(0x18, 0xc) prctl$PR_CAPBSET_DROP(0x18, 0x22) prctl$PR_CAPBSET_DROP(0x18, 0x21) prctl$PR_CAPBSET_DROP(0x18, 0x26) prctl$PR_CAPBSET_DROP(0x18, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1e) prctl$PR_CAPBSET_DROP(0x18, 0x10) prctl$PR_CAPBSET_DROP(0x18, 0x21) prctl$PR_CAPBSET_DROP(0x18, 0x1f) prctl$PR_CAPBSET_DROP(0x18, 0x12) prctl$PR_CAPBSET_DROP(0x18, 0x10) prctl$PR_CAPBSET_DROP(0x18, 0xb) prctl$PR_CAPBSET_DROP(0x18, 0x22) prctl$PR_CAPBSET_DROP(0x18, 0x21) prctl$PR_CAPBSET_DROP(0x18, 0x5) 06:27:10 executing program 3: prctl$PR_CAPBSET_DROP(0x18, 0x14) prctl$PR_CAPBSET_DROP(0x18, 0x8) prctl$PR_CAPBSET_DROP(0x18, 0x3) prctl$PR_CAPBSET_DROP(0x18, 0x16) prctl$PR_CAPBSET_DROP(0x18, 0x18) prctl$PR_CAPBSET_DROP(0x18, 0xc) prctl$PR_CAPBSET_DROP(0x18, 0x22) prctl$PR_CAPBSET_DROP(0x18, 0x21) prctl$PR_CAPBSET_DROP(0x18, 0x26) prctl$PR_CAPBSET_DROP(0x18, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x1e) prctl$PR_CAPBSET_DROP(0x18, 0x10) prctl$PR_CAPBSET_DROP(0x18, 0x21) prctl$PR_CAPBSET_DROP(0x18, 0x1f) prctl$PR_CAPBSET_DROP(0x18, 0x12) prctl$PR_CAPBSET_DROP(0x18, 0x10) prctl$PR_CAPBSET_DROP(0x18, 0xb) prctl$PR_CAPBSET_DROP(0x18, 0x22) prctl$PR_CAPBSET_DROP(0x18, 0x21) prctl$PR_CAPBSET_DROP(0x18, 0x5) 06:27:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x401, 0x7, &(0x7f0000000a40)=[{&(0x7f0000000300)="01f539c7579516046b292aa90052bc87948481205bf474b6014b7d304876c235ebbf2f323dadd80256845a6f9edd7f3e9d667f1dc0b02c21bf661b440f8354c097e721414b68bc82d751a444565c694bacaa74a2af788e26b5928d0913913619b34a19e7c869001ee3aa00ed3f46813970a39ad8f702527d5441f282121e68f05cd79559acc91be15d85a86ff8e1a4e228dab81771092ab7aa9340b45c83f8b96a76f2b8a465", 0xa6, 0xf89}, {&(0x7f00000003c0)="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", 0xfd, 0x4}, {&(0x7f00000004c0)="cbe953acd74809a0f27f6d5ecc8eb8e5843fe3e0d6c6321d8c9df9f0aa7870926f5875f4cfb9fdea2353684be3b434217554029e5e2d08a5aff0c448275c9ebecbb5421203c8efe8e5d2133dc97f3697e4d5a0e81a8d7d95fdb6dafe5bde363667684659ef77d152457fa25f24388b6feddeadede33669e9606828cdcaf8109f7a", 0x81, 0x100000001}, {&(0x7f0000000580)="c5f667afbf9c323eb6a0aa7f50ffff57ba4dbf94c5e5d543f7f87b9e5352ef240d373239dbafe808cac9096f415c2eb6c09f2a3f25ecc95fb2fdf3767186100061ecb35b87314094582d484fe80a48df984ca586e772a7bbe5cdda02bfcfe1ea11dc177b2882bf3a155ecb7dd10a037fad496e39f87e2ca180b152f3ef56a5bfa9262cf06f0a2fd5e548eca378ea82bfdc21cfaa67975d4bd0339dc877396615d208fd180267391ad7f893b501945d93028d4774d5d1d7fb58c8a3fa5e545594eb1ab6", 0xc3, 0x3ff}, {&(0x7f0000000680)="a18bd0abba613562fed70aa7c7a481dbab57a4b3cc567001cdb2734aabca70a582f715bc381224e21f1af28c92e23b04a51e8b4983f6d848fd18d8fb011fa380b39257be1bbec6ef64fe2885892febc67a2876deec6276241e60b8c86e81cb7169b5a4cf47fe65429083f0111c7df2e303ba06751d6d81ea94ea8c15e578b6bf4a72761ebfb14c95cf06f2a87880e8314ad4", 0x92, 0x2}, {&(0x7f0000000740)="b7b39eeb06efe37c21a72e5d1b8588b6584b32bf6b46a7f615940cf597949932566bcf25584559c55252125644fd310f44fc42d926ada162548324186188ee2245bc443eb2b12142a5c86bdaa9eb297bd431ec3be027ee40f21cf16fae7cb30f4038d60232d032", 0x67, 0x711d}, {&(0x7f0000000980)="403fd411f00c15c807d26d53203d70d3478567534b2c87d16d2d0cfc26a76ec00cbd8364acff363c1426600c310145a94923ff3831492b55b8d93fb5143cfaaa9666a543356b45b565905460379e6116fbc8db880425cc54ab1fd7b986fcb61ecd18ceb7dfd553b4ff099f856250d9546f217695acaa331c70bee77060c900a11118b571f1248fda47f12514ac3a0e474b075df8f84371ca3bdde874313ce1b9875426c088dddd", 0xa7, 0x1}], 0x10800, &(0x7f0000000880)=ANY=[@ANYBLOB='rodir,appraise_type=imasig,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',audit,euid<', @ANYRESDEC=0xee01, @ANYBLOB="2c6d61736b3d5e4d74192cc350504510185d95e7404aff52cd5d3a31c14e442c6f", @ANYRESDEC, @ANYBLOB=',\x00']) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x40, 0x8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x476c, &(0x7f0000000240)) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7, 0x0, 0x8, 0x0, 0x0, 0xae59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000940)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) [ 126.018576] loop3: detected capacity change from 0 to 40 [ 126.069934] audit: type=1400 audit(1664519230.335:7): avc: denied { open } for pid=3663 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.104071] audit: type=1400 audit(1664519230.370:8): avc: denied { kernel } for pid=3663 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 126.113919] ------------[ cut here ]------------ [ 126.113941] [ 126.113943] ====================================================== [ 126.113947] WARNING: possible circular locking dependency detected [ 126.113951] 6.0.0-rc7-next-20220929 #1 Not tainted [ 126.113957] ------------------------------------------------------ [ 126.113960] syz-executor.3/3665 is trying to acquire lock: [ 126.113967] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 126.114007] [ 126.114007] but task is already holding lock: [ 126.114010] ffff88800ebb1420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.114036] [ 126.114036] which lock already depends on the new lock. [ 126.114036] [ 126.114040] [ 126.114040] the existing dependency chain (in reverse order) is: [ 126.114043] [ 126.114043] -> #3 (&ctx->lock){....}-{2:2}: [ 126.114057] _raw_spin_lock+0x2a/0x40 [ 126.114068] __perf_event_task_sched_out+0x53b/0x18d0 [ 126.114079] __schedule+0xedd/0x2470 [ 126.114094] schedule+0xda/0x1b0 [ 126.114107] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.114119] syscall_exit_to_user_mode+0x19/0x40 [ 126.114132] do_syscall_64+0x48/0x90 [ 126.114150] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.114163] [ 126.114163] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 126.114176] _raw_spin_lock_nested+0x30/0x40 [ 126.114187] raw_spin_rq_lock_nested+0x1e/0x30 [ 126.114200] task_fork_fair+0x63/0x4d0 [ 126.114216] sched_cgroup_fork+0x3d0/0x540 [ 126.114230] copy_process+0x4183/0x6e20 [ 126.114241] kernel_clone+0xe7/0x890 [ 126.114250] user_mode_thread+0xad/0xf0 [ 126.114261] rest_init+0x24/0x250 [ 126.114272] arch_call_rest_init+0xf/0x14 [ 126.114289] start_kernel+0x4c6/0x4eb [ 126.114303] secondary_startup_64_no_verify+0xe0/0xeb [ 126.114318] [ 126.114318] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 126.114331] _raw_spin_lock_irqsave+0x39/0x60 [ 126.114342] try_to_wake_up+0xab/0x1930 [ 126.114355] up+0x75/0xb0 [ 126.114369] __up_console_sem+0x6e/0x80 [ 126.114385] console_unlock+0x46a/0x590 [ 126.114401] vt_ioctl+0x2822/0x2ca0 [ 126.114416] tty_ioctl+0x785/0x16b0 [ 126.114427] __x64_sys_ioctl+0x19a/0x210 [ 126.114440] do_syscall_64+0x3b/0x90 [ 126.114457] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.114469] [ 126.114469] -> #0 ((console_sem).lock){....}-{2:2}: [ 126.114483] __lock_acquire+0x2a02/0x5e70 [ 126.114500] lock_acquire+0x1a2/0x530 [ 126.114515] _raw_spin_lock_irqsave+0x39/0x60 [ 126.114526] down_trylock+0xe/0x70 [ 126.114540] __down_trylock_console_sem+0x3b/0xd0 [ 126.114556] vprintk_emit+0x16b/0x560 [ 126.114572] vprintk+0x84/0xa0 [ 126.114588] _printk+0xba/0xf1 [ 126.114599] report_bug.cold+0x72/0xab [ 126.114615] handle_bug+0x3c/0x70 [ 126.114632] exc_invalid_op+0x14/0x50 [ 126.114648] asm_exc_invalid_op+0x16/0x20 [ 126.114660] group_sched_out.part.0+0x2c7/0x460 [ 126.114678] ctx_sched_out+0x8f1/0xc10 [ 126.114694] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.114705] __schedule+0xedd/0x2470 [ 126.114719] schedule+0xda/0x1b0 [ 126.114732] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.114743] syscall_exit_to_user_mode+0x19/0x40 [ 126.114755] do_syscall_64+0x48/0x90 [ 126.114771] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.114784] [ 126.114784] other info that might help us debug this: [ 126.114784] [ 126.114786] Chain exists of: [ 126.114786] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 126.114786] [ 126.114801] Possible unsafe locking scenario: [ 126.114801] [ 126.114804] CPU0 CPU1 [ 126.114806] ---- ---- [ 126.114808] lock(&ctx->lock); [ 126.114814] lock(&rq->__lock); [ 126.114821] lock(&ctx->lock); [ 126.114827] lock((console_sem).lock); [ 126.114833] [ 126.114833] *** DEADLOCK *** [ 126.114833] [ 126.114834] 2 locks held by syz-executor.3/3665: [ 126.114841] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 126.114870] #1: ffff88800ebb1420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 126.114897] [ 126.114897] stack backtrace: [ 126.114900] CPU: 1 PID: 3665 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220929 #1 [ 126.114913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.114921] Call Trace: [ 126.114924] [ 126.114928] dump_stack_lvl+0x8b/0xb3 [ 126.114946] check_noncircular+0x263/0x2e0 [ 126.114963] ? format_decode+0x26c/0xb50 [ 126.114979] ? print_circular_bug+0x450/0x450 [ 126.114996] ? enable_ptr_key_workfn+0x20/0x20 [ 126.115013] ? format_decode+0x26c/0xb50 [ 126.115030] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 126.115047] __lock_acquire+0x2a02/0x5e70 [ 126.115069] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 126.115091] lock_acquire+0x1a2/0x530 [ 126.115108] ? down_trylock+0xe/0x70 [ 126.115125] ? lock_release+0x750/0x750 [ 126.115145] ? vprintk+0x84/0xa0 [ 126.115163] _raw_spin_lock_irqsave+0x39/0x60 [ 126.115174] ? down_trylock+0xe/0x70 [ 126.115190] down_trylock+0xe/0x70 [ 126.115206] ? vprintk+0x84/0xa0 [ 126.115223] __down_trylock_console_sem+0x3b/0xd0 [ 126.115240] vprintk_emit+0x16b/0x560 [ 126.115259] vprintk+0x84/0xa0 [ 126.115276] _printk+0xba/0xf1 [ 126.115287] ? record_print_text.cold+0x16/0x16 [ 126.115303] ? report_bug.cold+0x66/0xab [ 126.115321] ? group_sched_out.part.0+0x2c7/0x460 [ 126.115339] report_bug.cold+0x72/0xab [ 126.115358] handle_bug+0x3c/0x70 [ 126.115375] exc_invalid_op+0x14/0x50 [ 126.115393] asm_exc_invalid_op+0x16/0x20 [ 126.115406] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.115426] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.115438] RSP: 0018:ffff88804033fc48 EFLAGS: 00010006 [ 126.115447] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.115454] RDX: ffff88801bf73580 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 126.115462] RBP: ffff888040370000 R08: 0000000000000005 R09: 0000000000000001 [ 126.115470] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800ebb1400 [ 126.115477] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 126.115489] ? group_sched_out.part.0+0x2c7/0x460 [ 126.115509] ? group_sched_out.part.0+0x2c7/0x460 [ 126.115529] ctx_sched_out+0x8f1/0xc10 [ 126.115548] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.115562] ? lock_is_held_type+0xd7/0x130 [ 126.115576] ? __perf_cgroup_move+0x160/0x160 [ 126.115587] ? set_next_entity+0x304/0x550 [ 126.115604] ? update_curr+0x267/0x740 [ 126.115623] ? lock_is_held_type+0xd7/0x130 [ 126.115637] __schedule+0xedd/0x2470 [ 126.115654] ? io_schedule_timeout+0x150/0x150 [ 126.115670] ? rcu_read_lock_sched_held+0x3e/0x80 [ 126.115691] schedule+0xda/0x1b0 [ 126.115705] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.115718] syscall_exit_to_user_mode+0x19/0x40 [ 126.115731] do_syscall_64+0x48/0x90 [ 126.115749] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.115762] RIP: 0033:0x7fd823821b19 [ 126.115770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.115781] RSP: 002b:00007fd820d97218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.115791] RAX: 0000000000000001 RBX: 00007fd823934f68 RCX: 00007fd823821b19 [ 126.115799] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd823934f6c [ 126.115806] RBP: 00007fd823934f60 R08: 000000000000000e R09: 0000000000000000 [ 126.115813] R10: 0000000000000007 R11: 0000000000000246 R12: 00007fd823934f6c [ 126.115821] R13: 00007ffcb550748f R14: 00007fd820d97300 R15: 0000000000022000 [ 126.115834] [ 126.168313] WARNING: CPU: 1 PID: 3665 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 126.169003] Modules linked in: [ 126.169246] CPU: 1 PID: 3665 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220929 #1 [ 126.169858] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 126.170686] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 126.171093] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 6b 17 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 126.172438] RSP: 0018:ffff88804033fc48 EFLAGS: 00010006 [ 126.172839] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 126.173371] RDX: ffff88801bf73580 RSI: ffffffff81565e67 RDI: 0000000000000005 [ 126.173901] RBP: ffff888040370000 R08: 0000000000000005 R09: 0000000000000001 [ 126.174430] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800ebb1400 [ 126.174968] R13: ffff88806cf3d2c0 R14: ffffffff8547d040 R15: 0000000000000002 [ 126.175492] FS: 00007fd820d97700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 126.176085] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.176518] CR2: 00007f3a3d88c6f4 CR3: 0000000040260000 CR4: 0000000000350ee0 [ 126.177042] Call Trace: [ 126.177238] [ 126.177410] ctx_sched_out+0x8f1/0xc10 [ 126.177709] __perf_event_task_sched_out+0x6d0/0x18d0 [ 126.178112] ? lock_is_held_type+0xd7/0x130 [ 126.178435] ? __perf_cgroup_move+0x160/0x160 [ 126.178768] ? set_next_entity+0x304/0x550 [ 126.179089] ? update_curr+0x267/0x740 [ 126.179388] ? lock_is_held_type+0xd7/0x130 [ 126.179710] __schedule+0xedd/0x2470 [ 126.179996] ? io_schedule_timeout+0x150/0x150 [ 126.180340] ? rcu_read_lock_sched_held+0x3e/0x80 [ 126.180713] schedule+0xda/0x1b0 [ 126.180975] exit_to_user_mode_prepare+0x114/0x1a0 [ 126.181337] syscall_exit_to_user_mode+0x19/0x40 [ 126.181687] do_syscall_64+0x48/0x90 [ 126.181989] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 126.182373] RIP: 0033:0x7fd823821b19 [ 126.182645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 126.183970] RSP: 002b:00007fd820d97218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 126.184543] RAX: 0000000000000001 RBX: 00007fd823934f68 RCX: 00007fd823821b19 [ 126.185070] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd823934f6c [ 126.185589] RBP: 00007fd823934f60 R08: 000000000000000e R09: 0000000000000000 [ 126.186136] R10: 0000000000000007 R11: 0000000000000246 R12: 00007fd823934f6c [ 126.186658] R13: 00007ffcb550748f R14: 00007fd820d97300 R15: 0000000000022000 [ 126.187189] [ 126.187366] irq event stamp: 6214 [ 126.187624] hardirqs last enabled at (6213): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 126.188323] hardirqs last disabled at (6214): [] __schedule+0x1225/0x2470 [ 126.188936] softirqs last enabled at (6136): [] __irq_exit_rcu+0x11b/0x180 [ 126.189569] softirqs last disabled at (6127): [] __irq_exit_rcu+0x11b/0x180 [ 126.190204] ---[ end trace 0000000000000000 ]--- [ 126.461620] syz-executor.3: attempt to access beyond end of device [ 126.461620] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 126.462890] Buffer I/O error on dev loop3, logical block 10, lost async page write 06:27:10 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x401, 0x7, &(0x7f0000000a40)=[{&(0x7f0000000300)="01f539c7579516046b292aa90052bc87948481205bf474b6014b7d304876c235ebbf2f323dadd80256845a6f9edd7f3e9d667f1dc0b02c21bf661b440f8354c097e721414b68bc82d751a444565c694bacaa74a2af788e26b5928d0913913619b34a19e7c869001ee3aa00ed3f46813970a39ad8f702527d5441f282121e68f05cd79559acc91be15d85a86ff8e1a4e228dab81771092ab7aa9340b45c83f8b96a76f2b8a465", 0xa6, 0xf89}, {&(0x7f00000003c0)="987d97b52b66f33506df8af45d1559edd9cefa91ca974a0a0451dbf9d42fb29619d9eeec57b02c14dea5ff059bbcbe2320b62ce0385d9d9ce77eebaca7a8e46b0957f8d087b43f8c524a794a1bfbd876de94a72965899bd3f32a8ad3f6cb6252df23f02e0f56a7402914b229d99378aa4666ade2bf54c5a04c85c6b9ccd300f00ebe4f60e1747fc167e327bae9faec91223a12a489e1cf40f6302122097961d74c7309a9713a2fc8728456e7dc7944890975e94a2bf85eeda384d79407d163fb6c969ad7041fd5f112044064b5bfdc98a25885671e77de25e6f2e17e83792d8f04c5d7e32c62d1cab221082f5a8af08794dbacee6b9a6a67fe07da088e", 0xfd, 0x4}, {&(0x7f00000004c0)="cbe953acd74809a0f27f6d5ecc8eb8e5843fe3e0d6c6321d8c9df9f0aa7870926f5875f4cfb9fdea2353684be3b434217554029e5e2d08a5aff0c448275c9ebecbb5421203c8efe8e5d2133dc97f3697e4d5a0e81a8d7d95fdb6dafe5bde363667684659ef77d152457fa25f24388b6feddeadede33669e9606828cdcaf8109f7a", 0x81, 0x100000001}, {&(0x7f0000000580)="c5f667afbf9c323eb6a0aa7f50ffff57ba4dbf94c5e5d543f7f87b9e5352ef240d373239dbafe808cac9096f415c2eb6c09f2a3f25ecc95fb2fdf3767186100061ecb35b87314094582d484fe80a48df984ca586e772a7bbe5cdda02bfcfe1ea11dc177b2882bf3a155ecb7dd10a037fad496e39f87e2ca180b152f3ef56a5bfa9262cf06f0a2fd5e548eca378ea82bfdc21cfaa67975d4bd0339dc877396615d208fd180267391ad7f893b501945d93028d4774d5d1d7fb58c8a3fa5e545594eb1ab6", 0xc3, 0x3ff}, {&(0x7f0000000680)="a18bd0abba613562fed70aa7c7a481dbab57a4b3cc567001cdb2734aabca70a582f715bc381224e21f1af28c92e23b04a51e8b4983f6d848fd18d8fb011fa380b39257be1bbec6ef64fe2885892febc67a2876deec6276241e60b8c86e81cb7169b5a4cf47fe65429083f0111c7df2e303ba06751d6d81ea94ea8c15e578b6bf4a72761ebfb14c95cf06f2a87880e8314ad4", 0x92, 0x2}, {&(0x7f0000000740)="b7b39eeb06efe37c21a72e5d1b8588b6584b32bf6b46a7f615940cf597949932566bcf25584559c55252125644fd310f44fc42d926ada162548324186188ee2245bc443eb2b12142a5c86bdaa9eb297bd431ec3be027ee40f21cf16fae7cb30f4038d60232d032", 0x67, 0x711d}, {&(0x7f0000000980)="403fd411f00c15c807d26d53203d70d3478567534b2c87d16d2d0cfc26a76ec00cbd8364acff363c1426600c310145a94923ff3831492b55b8d93fb5143cfaaa9666a543356b45b565905460379e6116fbc8db880425cc54ab1fd7b986fcb61ecd18ceb7dfd553b4ff099f856250d9546f217695acaa331c70bee77060c900a11118b571f1248fda47f12514ac3a0e474b075df8f84371ca3bdde874313ce1b9875426c088dddd", 0xa7, 0x1}], 0x10800, &(0x7f0000000880)=ANY=[@ANYBLOB='rodir,appraise_type=imasig,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',audit,euid<', @ANYRESDEC=0xee01, @ANYBLOB="2c6d61736b3d5e4d74192cc350504510185d95e7404aff52cd5d3a31c14e442c6f", @ANYRESDEC, @ANYBLOB=',\x00']) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x40, 0x8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x476c, &(0x7f0000000240)) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7, 0x0, 0x8, 0x0, 0x0, 0xae59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000940)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) [ 126.584066] loop3: detected capacity change from 0 to 40 [ 126.666909] syz-executor.3: attempt to access beyond end of device [ 126.666909] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 126.668150] Buffer I/O error on dev loop3, logical block 10, lost async page write 06:27:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x401, 0x7, &(0x7f0000000a40)=[{&(0x7f0000000300)="01f539c7579516046b292aa90052bc87948481205bf474b6014b7d304876c235ebbf2f323dadd80256845a6f9edd7f3e9d667f1dc0b02c21bf661b440f8354c097e721414b68bc82d751a444565c694bacaa74a2af788e26b5928d0913913619b34a19e7c869001ee3aa00ed3f46813970a39ad8f702527d5441f282121e68f05cd79559acc91be15d85a86ff8e1a4e228dab81771092ab7aa9340b45c83f8b96a76f2b8a465", 0xa6, 0xf89}, {&(0x7f00000003c0)="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", 0xfd, 0x4}, {&(0x7f00000004c0)="cbe953acd74809a0f27f6d5ecc8eb8e5843fe3e0d6c6321d8c9df9f0aa7870926f5875f4cfb9fdea2353684be3b434217554029e5e2d08a5aff0c448275c9ebecbb5421203c8efe8e5d2133dc97f3697e4d5a0e81a8d7d95fdb6dafe5bde363667684659ef77d152457fa25f24388b6feddeadede33669e9606828cdcaf8109f7a", 0x81, 0x100000001}, {&(0x7f0000000580)="c5f667afbf9c323eb6a0aa7f50ffff57ba4dbf94c5e5d543f7f87b9e5352ef240d373239dbafe808cac9096f415c2eb6c09f2a3f25ecc95fb2fdf3767186100061ecb35b87314094582d484fe80a48df984ca586e772a7bbe5cdda02bfcfe1ea11dc177b2882bf3a155ecb7dd10a037fad496e39f87e2ca180b152f3ef56a5bfa9262cf06f0a2fd5e548eca378ea82bfdc21cfaa67975d4bd0339dc877396615d208fd180267391ad7f893b501945d93028d4774d5d1d7fb58c8a3fa5e545594eb1ab6", 0xc3, 0x3ff}, {&(0x7f0000000680)="a18bd0abba613562fed70aa7c7a481dbab57a4b3cc567001cdb2734aabca70a582f715bc381224e21f1af28c92e23b04a51e8b4983f6d848fd18d8fb011fa380b39257be1bbec6ef64fe2885892febc67a2876deec6276241e60b8c86e81cb7169b5a4cf47fe65429083f0111c7df2e303ba06751d6d81ea94ea8c15e578b6bf4a72761ebfb14c95cf06f2a87880e8314ad4", 0x92, 0x2}, {&(0x7f0000000740)="b7b39eeb06efe37c21a72e5d1b8588b6584b32bf6b46a7f615940cf597949932566bcf25584559c55252125644fd310f44fc42d926ada162548324186188ee2245bc443eb2b12142a5c86bdaa9eb297bd431ec3be027ee40f21cf16fae7cb30f4038d60232d032", 0x67, 0x711d}, {&(0x7f0000000980)="403fd411f00c15c807d26d53203d70d3478567534b2c87d16d2d0cfc26a76ec00cbd8364acff363c1426600c310145a94923ff3831492b55b8d93fb5143cfaaa9666a543356b45b565905460379e6116fbc8db880425cc54ab1fd7b986fcb61ecd18ceb7dfd553b4ff099f856250d9546f217695acaa331c70bee77060c900a11118b571f1248fda47f12514ac3a0e474b075df8f84371ca3bdde874313ce1b9875426c088dddd", 0xa7, 0x1}], 0x10800, &(0x7f0000000880)=ANY=[@ANYBLOB='rodir,appraise_type=imasig,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',audit,euid<', @ANYRESDEC=0xee01, @ANYBLOB="2c6d61736b3d5e4d74192cc350504510185d95e7404aff52cd5d3a31c14e442c6f", @ANYRESDEC, @ANYBLOB=',\x00']) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x40, 0x8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x476c, &(0x7f0000000240)) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7, 0x0, 0x8, 0x0, 0x0, 0xae59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000940)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) [ 126.788298] loop3: detected capacity change from 0 to 40 [ 126.872550] syz-executor.3: attempt to access beyond end of device [ 126.872550] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 126.873717] Buffer I/O error on dev loop3, logical block 10, lost async page write 06:27:11 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x401, 0x7, &(0x7f0000000a40)=[{&(0x7f0000000300)="01f539c7579516046b292aa90052bc87948481205bf474b6014b7d304876c235ebbf2f323dadd80256845a6f9edd7f3e9d667f1dc0b02c21bf661b440f8354c097e721414b68bc82d751a444565c694bacaa74a2af788e26b5928d0913913619b34a19e7c869001ee3aa00ed3f46813970a39ad8f702527d5441f282121e68f05cd79559acc91be15d85a86ff8e1a4e228dab81771092ab7aa9340b45c83f8b96a76f2b8a465", 0xa6, 0xf89}, {&(0x7f00000003c0)="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", 0xfd, 0x4}, {&(0x7f00000004c0)="cbe953acd74809a0f27f6d5ecc8eb8e5843fe3e0d6c6321d8c9df9f0aa7870926f5875f4cfb9fdea2353684be3b434217554029e5e2d08a5aff0c448275c9ebecbb5421203c8efe8e5d2133dc97f3697e4d5a0e81a8d7d95fdb6dafe5bde363667684659ef77d152457fa25f24388b6feddeadede33669e9606828cdcaf8109f7a", 0x81, 0x100000001}, {&(0x7f0000000580)="c5f667afbf9c323eb6a0aa7f50ffff57ba4dbf94c5e5d543f7f87b9e5352ef240d373239dbafe808cac9096f415c2eb6c09f2a3f25ecc95fb2fdf3767186100061ecb35b87314094582d484fe80a48df984ca586e772a7bbe5cdda02bfcfe1ea11dc177b2882bf3a155ecb7dd10a037fad496e39f87e2ca180b152f3ef56a5bfa9262cf06f0a2fd5e548eca378ea82bfdc21cfaa67975d4bd0339dc877396615d208fd180267391ad7f893b501945d93028d4774d5d1d7fb58c8a3fa5e545594eb1ab6", 0xc3, 0x3ff}, {&(0x7f0000000680)="a18bd0abba613562fed70aa7c7a481dbab57a4b3cc567001cdb2734aabca70a582f715bc381224e21f1af28c92e23b04a51e8b4983f6d848fd18d8fb011fa380b39257be1bbec6ef64fe2885892febc67a2876deec6276241e60b8c86e81cb7169b5a4cf47fe65429083f0111c7df2e303ba06751d6d81ea94ea8c15e578b6bf4a72761ebfb14c95cf06f2a87880e8314ad4", 0x92, 0x2}, {&(0x7f0000000740)="b7b39eeb06efe37c21a72e5d1b8588b6584b32bf6b46a7f615940cf597949932566bcf25584559c55252125644fd310f44fc42d926ada162548324186188ee2245bc443eb2b12142a5c86bdaa9eb297bd431ec3be027ee40f21cf16fae7cb30f4038d60232d032", 0x67, 0x711d}, {&(0x7f0000000980)="403fd411f00c15c807d26d53203d70d3478567534b2c87d16d2d0cfc26a76ec00cbd8364acff363c1426600c310145a94923ff3831492b55b8d93fb5143cfaaa9666a543356b45b565905460379e6116fbc8db880425cc54ab1fd7b986fcb61ecd18ceb7dfd553b4ff099f856250d9546f217695acaa331c70bee77060c900a11118b571f1248fda47f12514ac3a0e474b075df8f84371ca3bdde874313ce1b9875426c088dddd", 0xa7, 0x1}], 0x10800, &(0x7f0000000880)=ANY=[@ANYBLOB='rodir,appraise_type=imasig,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',audit,euid<', @ANYRESDEC=0xee01, @ANYBLOB="2c6d61736b3d5e4d74192cc350504510185d95e7404aff52cd5d3a31c14e442c6f", @ANYRESDEC, @ANYBLOB=',\x00']) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x40, 0x8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x476c, &(0x7f0000000240)) write$binfmt_aout(r4, &(0x7f0000001180)=ANY=[], 0x220) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7, 0x0, 0x8, 0x0, 0x0, 0xae59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000940)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r4, r0, 0x0, 0xfffffdef) [ 126.984776] loop3: detected capacity change from 0 to 40 06:27:11 executing program 5: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0xa8aa354ea822fd51, 0x1d1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x44, 0x0, "704f5992d666aa2888e479ca552ee155f638582a91ca97213cf4774a2e4c350cdc3f9f62a4c21970bd149a52fa311b916bf00b51b808c412ed6b9fcbb5be4a2fb7dd8fd0dfa22b4100"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000018c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0xb58a, 0x100000001, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r3, 0x0, 0x0, 0x87ffffc) openat(r3, &(0x7f00000001c0)='./file1\x00', 0x400000, 0x102) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x181c00, 0x0) r4 = memfd_create(&(0x7f0000000200)='-%@,/.(\x00', 0x6) ftruncate(r0, 0x1) dup(r4) [ 127.067138] syz-executor.3: attempt to access beyond end of device [ 127.067138] loop3: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 127.068378] Buffer I/O error on dev loop3, logical block 10, lost async page write 06:27:11 executing program 6: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736677c66200088020000400000004f80000200040000300000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11000}, {&(0x7f0000010700)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x11800}, {&(0x7f0000010800)="53595a4b414c4c45522020080000e980325132510000e980325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100037e970325132510000e970325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200037e970325132510000e970325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c4532202020202020200037e970325132510000e970325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c200037e970325132510000e9703251070064000000", 0x120, 0x12000}, {&(0x7f0000010a00)="2e20202020202020202020100037e970325132510000e97032510300000000002e2e202020202020202020100037e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200037e970325132510000e970325104001a040000", 0x80, 0x52000}, {&(0x7f0000010b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x92000}, {&(0x7f0000011000)='syzkallers\x00'/32, 0x20, 0xd2000}, {&(0x7f0000011100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x152000}], 0x0, &(0x7f0000011200)) [ 127.165722] loop6: detected capacity change from 0 to 5408 [ 128.280568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.281344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.485060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.485883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.489095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.489889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.492879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.493716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.000619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.001367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.005691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.006401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 VM DIAGNOSIS: 06:27:10 Registers: info registers vcpu 0 RAX=0000000000000012 RBX=ffff88806ce3c480 RCX=dead000080120010 RDX=0000000000000000 RSI=ffffea00003a0b00 RDI=ffff888007c4f780 RBP=ffff888007c4f780 RSP=ffff88801742f7b8 R8 =0000000000000000 R9 =ffffffff85b06a17 R10=fffffbfff0b60d42 R11=0000000000000001 R12=00000000ffffffff R13=ffffea00003a0b00 R14=ffff88801f3fb580 R15=ffff88800e82db00 RIP=ffffffff8177fd53 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7c3bc7c1f0 CR3=0000000030f0e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f YMM01=0000000000000000 0000000000000000 6461657268747062 696c2f756e672d78 YMM02=0000000000000000 0000000000000000 00302e6f732e6461 657268747062696c YMM03=0000000000000000 0000000000000000 2f756e672d78756e 696c2d34365f3638 YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff88804033f690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd820d97700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3a3d88c6f4 CR3=0000000040260000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ff00000000ff0000 00000000000000ff YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000