[ 272.837219][ T3744] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.844373][ T3744] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.878638][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 272.885853][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.923253][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.929374][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.936590][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.944772][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.953207][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.953560][ T3749] device veth0_vlan entered promiscuous mode [ 272.960076][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.970806][ T3749] device veth1_vlan entered promiscuous mode [ 272.980964][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 272.987528][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.008677][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.014603][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.020630][ T3749] device veth0_macvtap entered promiscuous mode [ 273.028316][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 273.034845][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 273.040565][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 273.046885][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.048864][ T3711] Bluetooth: hci0: command 0x040f tx timeout [ 273.052185][ T3712] Bluetooth: hci1: command 0x040f tx timeout [ 273.061847][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 273.068596][ T3749] device veth1_macvtap entered promiscuous mode [ 273.092728][ T3749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.101858][ T3749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.108929][ T3749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.119368][ T3749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.125820][ T3749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.133963][ T3749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.143762][ T3749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.152109][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 273.157793][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.163555][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.173154][ T3749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.182026][ T3749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.190502][ T3749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.198627][ T3749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.208678][ T3749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.216584][ T3749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.226478][ T3749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.233677][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.240872][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.251704][ T3749] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.259088][ T3749] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.265302][ T3749] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.271659][ T3749] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.314729][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.321252][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.330693][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 273.341457][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.346039][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.352447][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 00:44:02 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x4, &(0x7f00000015c0)=[{0x10}], 0x10}, 0x0) 00:44:02 executing program 1: setitimer(0x6, 0x0, 0x0) 00:44:02 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@random="4b0f0a55865e", @empty, @val, {@ipv4}}, 0x0) 00:44:02 executing program 3: shmget(0x0, 0x3000, 0xc4, &(0x7f0000ffc000/0x3000)=nil) 00:44:02 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1023, 0x0, 0x0) [ 273.396182][ T3794] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 00:44:02 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$lock(r0, 0x7, 0x0) 00:44:02 executing program 1: r0 = socket$inet(0x2, 0x4003, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 00:44:02 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1007, 0x0, 0x0) [ 273.433547][ T38] audit: type=1400 audit(1667177042.624:106): avc: denied { lock } for pid=3800 comm="syz-executor.2" path="socket:[32429]" dev="sockfs" ino=32429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 00:44:02 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 00:44:02 executing program 2: setitimer(0x0, &(0x7f00000000c0)={{}, {0xffffffff, 0x777}}, 0x0) 00:44:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@mcast1, @private2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r2}) 00:44:02 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000003840)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}, {{&(0x7f0000001740)=@qipcrtr, 0x80, 0x0}}], 0x2, 0x1, &(0x7f0000003880)={0x0, r1+10000000}) 00:44:02 executing program 1: socketpair(0x22, 0x2, 0x4, &(0x7f0000000000)) 00:44:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:44:02 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @cb_func, @func, @map_idx_val, @initr0]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 273.487524][ T38] audit: type=1400 audit(1667177042.674:107): avc: denied { create } for pid=3812 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 00:44:02 executing program 1: syz_usbip_server_init(0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 00:44:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x1010001) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) [ 273.507458][ T3817] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 00:44:02 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) [ 273.535510][ T3821] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 273.541364][ T3821] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 273.553849][ T3821] vhci_hcd vhci_hcd.0: Device attached [ 273.561697][ T3822] vhci_hcd: connection closed [ 273.562067][ T11] vhci_hcd: stop threads [ 273.569069][ T11] vhci_hcd: release socket [ 273.572254][ T11] vhci_hcd: disconnect device 00:44:02 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x0, 0x0, &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:44:02 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000080)=""/101, 0x7ffffffff000}, {0x0}, {0x0}, {&(0x7f0000000240)=""/29, 0x1d}, {0x0}, {0x0}, {&(0x7f0000001380)=""/255, 0xff}, {0x0}, {&(0x7f0000001580)=""/208, 0xd0}], 0x9}}, {{&(0x7f0000001740)=@qipcrtr, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000003880)) 00:44:02 executing program 2: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 00:44:02 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=@raw=[@generic, @func, @call, @func, @generic], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:44:02 executing program 2: r0 = socket(0xa, 0x3, 0x9) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, 0x0) 00:44:03 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140), 0x3ff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x8a025) 00:44:03 executing program 1: syz_usbip_server_init(0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 00:44:03 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1, &(0x7f0000000040)=@raw=[@generic], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:44:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x1010001) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:03 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140), 0x3ff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x8a025) [ 274.388694][ T3849] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 274.394076][ T3849] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 274.403054][ T3849] vhci_hcd vhci_hcd.0: Device attached 00:44:03 executing program 0: msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000080)=""/216) [ 274.411602][ T3851] vhci_hcd: connection closed [ 274.412655][ T11] vhci_hcd: stop threads [ 274.420725][ T11] vhci_hcd: release socket 00:44:03 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 274.439198][ T11] vhci_hcd: disconnect device 00:44:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 00:44:03 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 274.727921][ T3710] Bluetooth: hci2: command 0x041b tx timeout [ 274.890367][ T3710] Bluetooth: hci3: command 0x041b tx timeout 00:44:04 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0x1, &(0x7f00000011c0)=@raw=[@call], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 275.128922][ T3710] Bluetooth: hci0: command 0x0419 tx timeout [ 275.135755][ T3710] Bluetooth: hci1: command 0x0419 tx timeout 00:44:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x1010001) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:04 executing program 0: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0xfffffffffffffe6d) 00:44:04 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_int(r0, 0x1, 0x13, 0x0, &(0x7f0000002640)) 00:44:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x3781, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, 0x48) [ 275.309813][ T38] kauditd_printk_skb: 23 callbacks suppressed 00:44:04 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) [ 275.309827][ T38] audit: type=1400 audit(1667177044.504:131): avc: denied { create } for pid=3870 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 00:44:04 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) write$tun(r0, 0x0, 0x127) 00:44:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) [ 275.338287][ T38] audit: type=1400 audit(1667177044.504:132): avc: denied { getopt } for pid=3870 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 00:44:04 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22062, 0x0) [ 275.358823][ T38] audit: type=1400 audit(1667177044.504:133): avc: denied { map_create } for pid=3872 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 275.385734][ T38] audit: type=1400 audit(1667177044.504:134): avc: denied { map_read map_write } for pid=3872 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 275.399215][ T38] audit: type=1400 audit(1667177044.554:135): avc: denied { write } for pid=3881 comm="syz-executor.1" path="socket:[31374]" dev="sockfs" ino=31374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 275.457027][ T38] audit: type=1400 audit(1667177044.644:136): avc: denied { prog_run } for pid=3879 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 275.559895][ T38] audit: type=1804 audit(1667177044.754:137): pid=3885 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3572424375/syzkaller.u8ltyz/14/cgroup.controllers" dev="sda1" ino=1158 res=1 errno=0 00:44:05 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xb}) 00:44:05 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000018c0)={0x7, 'wg2\x00'}) 00:44:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x1010001) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:05 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 00:44:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) [ 276.191656][ T38] audit: type=1400 audit(1667177045.384:138): avc: denied { write } for pid=3887 comm="syz-executor.2" name="ip_vs_stats" dev="proc" ino=4026533024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 00:44:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) [ 276.209298][ T38] audit: type=1400 audit(1667177045.384:139): avc: denied { ioctl } for pid=3888 comm="syz-executor.1" path="socket:[30603]" dev="sockfs" ino=30603 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 276.423499][ T38] audit: type=1804 audit(1667177045.614:140): pid=3899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3572424375/syzkaller.u8ltyz/15/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 [ 276.807759][ T3710] Bluetooth: hci2: command 0x040f tx timeout 00:44:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000800000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0xf}, 0x1c}}, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) [ 276.967759][ T3710] Bluetooth: hci3: command 0x040f tx timeout 00:44:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x1010001) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 00:44:06 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000000280)) 00:44:06 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 00:44:06 executing program 1: r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x60002001}) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) 00:44:06 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 00:44:06 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) socketpair(0x1d, 0x0, 0x0, &(0x7f0000000140)) socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) 00:44:06 executing program 1: r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x60002001}) epoll_wait(r0, &(0x7f0000000500)=[{}], 0x1, 0x0) [ 277.305119][ T3921] can: request_module (can-proto-0) failed. 00:44:06 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:44:07 executing program 0: syz_io_uring_setup(0x7f5f, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), 0x0) 00:44:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x1010001) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 00:44:07 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001740)=@qipcrtr, 0x80, 0x0}}], 0x2, 0x1, 0x0) 00:44:07 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/27) 00:44:07 executing program 0: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000005b40)={0x0, 0x3938700}) 00:44:07 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='macvlan0\x00') 00:44:07 executing program 1: socketpair(0x22, 0x0, 0x200000, &(0x7f0000000000)) 00:44:07 executing program 0: socketpair(0x0, 0x2200, 0x0, 0x0) 00:44:07 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0) 00:44:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x1010001) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 00:44:08 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@qipcrtr, 0x80, 0x0, 0x5a}}], 0x2, 0x1, 0x0) 00:44:08 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff]}, 0x80) 00:44:08 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x1}, 0x48) 00:44:08 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003700), 0x3, 0x12043, &(0x7f0000000040)) 00:44:08 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "9e6a57cab6f1137115662fcce7248775927ef2eea9379421195fa7d1487541901ce267dd41acdb652d724765eda1c95ffacfa4a954a43f89dc31d8076281d7e9"}, 0x48, 0xfffffffffffffffd) keyctl$search(0x6, r0, 0x0, 0x0, 0x0) 00:44:08 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000040)) 00:44:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) syz_clone(0x8a031040, &(0x7f0000000300)="e099e88cb2120f5f65b4c4289b83f82c090a3ca89ced4ed547f798cf72b9e23059b8f3036ad394ee46b83011083292686e63b6fc49abefde32c4aaa843", 0x3d, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="66cce337984306dae7a17a80c4e7fa7ee430f721868dc0fa6636cfc601b23aad1477a7b876f3d4cdfe46eb8a0aabf8cdac052c924b0d6dfdd83ae2753bef534979a8a3e0aab97437e6e0144e75344ad0b619f7c01244573307820b90407f26303aa17b99b79e1f48a4db3b097417badd2421ea57471083a0da6327fe466546ef5a83f6ba00431af83921d235") r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x8a025) [ 278.897795][ T3710] Bluetooth: hci2: command 0x0419 tx timeout [ 279.047983][ T3712] Bluetooth: hci3: command 0x0419 tx timeout 00:44:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x1010001) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:08 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000040)=@raw=[@generic, @func, @map_idx_val, @call, @func], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x85, &(0x7f00000000c0)=""/133, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:44:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) syz_clone(0x8a031040, &(0x7f0000000300)="e099e88cb2120f5f65b4c4289b83f82c090a3ca89ced4ed547f798cf72b9e23059b8f3036ad394ee46b83011083292686e63b6fc49abefde32c4aaa843", 0x3d, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="66cce337984306dae7a17a80c4e7fa7ee430f721868dc0fa6636cfc601b23aad1477a7b876f3d4cdfe46eb8a0aabf8cdac052c924b0d6dfdd83ae2753bef534979a8a3e0aab97437e6e0144e75344ad0b619f7c01244573307820b90407f26303aa17b99b79e1f48a4db3b097417badd2421ea57471083a0da6327fe466546ef5a83f6ba00431af83921d235") r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x8a025) 00:44:08 executing program 0: clock_gettime(0x0, &(0x7f0000003840)) syz_io_uring_setup(0x752, &(0x7f00000006c0), &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000740), 0x0) syz_io_uring_setup(0x72fa, &(0x7f0000000000), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 00:44:08 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 00:44:08 executing program 2: socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000080)=""/101, 0x65}, {0x0}, {&(0x7f0000000240)=""/29, 0x1d}, {0x0}, {0x0}, {&(0x7f0000001380)=""/255, 0xff}, {0x0}, {&(0x7f0000001580)=""/208, 0xd0}], 0x8}, 0x7}, {{0x0, 0x0, 0x0}, 0xe9}], 0x2, 0x1, &(0x7f0000003880)) syz_usbip_server_init(0x3) 00:44:08 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') [ 279.735906][ T3975] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 279.741335][ T3975] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 279.755466][ T3975] vhci_hcd vhci_hcd.0: Device attached 00:44:08 executing program 0: r0 = getpid() syz_open_procfs(r0, 0x0) r1 = gettid() syz_open_procfs(r1, 0x0) [ 279.763712][ T3979] vhci_hcd: connection closed [ 279.767953][ T3730] vhci_hcd: stop threads [ 279.776382][ T3730] vhci_hcd: release socket [ 279.780334][ T3730] vhci_hcd: disconnect device 00:44:09 executing program 0: socketpair(0x1d, 0x0, 0x7fffffff, &(0x7f0000000000)) 00:44:09 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x50) 00:44:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x1010001) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:09 executing program 2: socketpair(0x22, 0x0, 0x1, &(0x7f0000000040)) 00:44:09 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000003840)) clock_gettime(0x0, &(0x7f0000000100)) 00:44:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="05"], 0x4) 00:44:09 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:44:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6(0xa, 0x0, 0x200006) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x4000, 0x0) preadv(r4, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/200, 0x1db000}], 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000000c0)={0x9, {0x0, 0x0, 0x6}}) 00:44:09 executing program 1: syz_open_dev$sg(&(0x7f0000000300), 0x4, 0x48759a162daed6ab) [ 280.609502][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 280.609519][ T38] audit: type=1400 audit(1667177049.804:150): avc: denied { bind } for pid=3998 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 280.637162][ T38] audit: type=1400 audit(1667177049.804:151): avc: denied { write } for pid=3998 comm="syz-executor.1" path="socket:[32566]" dev="sockfs" ino=32566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 00:44:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) [ 280.659162][ T38] audit: type=1400 audit(1667177049.854:152): avc: denied { create } for pid=4001 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 280.678161][ T38] audit: type=1400 audit(1667177049.864:153): avc: denied { read } for pid=4001 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 280.723293][ T38] audit: type=1400 audit(1667177049.914:154): avc: denied { write } for pid=4004 comm="syz-executor.0" name="nullb0" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.742534][ T38] audit: type=1400 audit(1667177049.914:155): avc: denied { map } for pid=4004 comm="syz-executor.0" path="/dev/nullb0" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.762632][ T38] audit: type=1400 audit(1667177049.914:156): avc: denied { execute } for pid=4004 comm="syz-executor.0" path="/dev/nullb0" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 280.781190][ T38] audit: type=1400 audit(1667177049.934:157): avc: denied { execute } for pid=4006 comm="syz-executor.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=30709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 280.944240][ T4009] syz-executor.0 (4009) used greatest stack depth: 23176 bytes left [ 280.959926][ T38] audit: type=1400 audit(1667177050.154:158): avc: denied { append } for pid=3111 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 280.980018][ T38] audit: type=1400 audit(1667177050.154:159): avc: denied { open } for pid=3111 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 00:44:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6(0xa, 0x0, 0x200006) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x4000, 0x0) preadv(r4, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/200, 0x1db000}], 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000000c0)={0x9, {0x0, 0x0, 0x6}}) 00:44:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x1010001) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:10 executing program 2: socketpair(0xa, 0x0, 0x0, &(0x7f0000000000)) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) 00:44:10 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:10 executing program 2: r0 = getpid() r1 = getpid() tgkill(r1, r0, 0x0) 00:44:10 executing program 2: r0 = getpid() r1 = getpid() tgkill(r1, r0, 0x0) 00:44:10 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 00:44:10 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='tunl0\x00') 00:44:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6(0xa, 0x0, 0x200006) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x300000e, 0x13, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x4000, 0x0) preadv(r4, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/200, 0x1db000}], 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000000c0)={0x9, {0x0, 0x0, 0x6}}) [ 281.876502][ T4016] syz-executor.0 (4016) used greatest stack depth: 23136 bytes left 00:44:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x1010001) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:11 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) 00:44:11 executing program 2: r0 = msgget(0x2, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x6, 0x1ff, 0x7, 0x6}, &(0x7f0000000040)={0x7, 0x8}, 0x0, &(0x7f0000000100)={r1, r2+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) socketpair(0x0, 0x0, 0x0, 0x0) 00:44:11 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:11 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 00:44:11 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000200)="af2d55", 0x3}], 0x1}, 0x0) 00:44:11 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000040)=""/179) 00:44:11 executing program 0: clock_gettime(0x556628a85890a8ae, 0x0) 00:44:12 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000017c0)=ANY=[], 0x160}, 0x0) 00:44:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:12 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 00:44:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:12 executing program 0: syz_io_uring_setup(0x55bb, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 00:44:12 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f0000000080)) 00:44:12 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 00:44:12 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {0x0, 0x7ffff000}, {0x0}, {0x0}, {&(0x7f0000000280)=""/230, 0xe6}, {0x0}, {0x0}, {&(0x7f0000001480)=""/212, 0xd4}, {0x0}], 0x9}}, {{0x0, 0x0, 0x0}}], 0x2, 0x1, &(0x7f0000003880)) 00:44:12 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:44:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:13 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x6801, 0x0) 00:44:13 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 00:44:13 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:13 executing program 2: msgsnd(0x0, &(0x7f0000000480)={0x3}, 0x8, 0x0) 00:44:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x0, 0x3, 0x3a) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x8a025) 00:44:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x0, 0x3, 0x3a) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x8a025) 00:44:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:14 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 00:44:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x0, 0x3, 0x3a) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x0, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x8a025) 00:44:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 00:44:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:15 executing program 2: msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/234) 00:44:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) [ 286.157338][ T38] kauditd_printk_skb: 8 callbacks suppressed 00:44:15 executing program 2: syz_io_uring_setup(0x7f5f, &(0x7f0000000000), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 286.157373][ T38] audit: type=1400 audit(1667177055.344:168): avc: denied { ioctl } for pid=4129 comm="syz-executor.2" path="socket:[34849]" dev="sockfs" ino=34849 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 00:44:15 executing program 2: socketpair(0x26, 0x5, 0x7, &(0x7f0000000000)) 00:44:15 executing program 2: socketpair(0x2c, 0x3, 0xffff, &(0x7f0000000000)) [ 286.240707][ T38] audit: type=1400 audit(1667177055.434:169): avc: denied { create } for pid=4136 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 00:44:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:16 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x4) 00:44:16 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x2, 'veth1_to_hsr\x00', {}, 0x5}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'macvlan0\x00', @ifru_addrs=@rc={0x1f, @any, 0x3}}}) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/140) r1 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001740)=@qipcrtr, 0x80, 0x0}}], 0x2, 0x1, 0x0) r2 = msgget(0x3, 0x0) connect$rds(r1, &(0x7f00000000c0)={0x2, 0x4e22, @broadcast}, 0x10) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000040)={{0x1, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) msgctl$IPC_RMID(r2, 0x0) 00:44:16 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000021c0)=[{0xfffffffffffffffc}], 0x1}, 0x0) 00:44:16 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000003880)) syz_usbip_server_init(0x3) [ 287.067124][ T4154] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 287.072585][ T4154] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 287.083701][ T4154] vhci_hcd vhci_hcd.0: Device attached [ 287.090123][ T4155] vhci_hcd: connection closed [ 287.090312][ T11] vhci_hcd: stop threads [ 287.097287][ T11] vhci_hcd: release socket [ 287.101742][ T11] vhci_hcd: disconnect device 00:44:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 00:44:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:17 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001740)=@qipcrtr, 0xffffffffffffff9d, 0x0}}], 0x2, 0x40000301, 0x0) 00:44:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x3781, 0x6}, 0x48) 00:44:17 executing program 2: socket$rds(0x15, 0x5, 0x0) syz_usbip_server_init(0x2) [ 287.878543][ T4174] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 287.884783][ T4174] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 287.892166][ T4174] vhci_hcd vhci_hcd.0: Device attached [ 287.899147][ T4175] vhci_hcd: connection closed [ 287.899692][ T11] vhci_hcd: stop threads [ 287.910926][ T11] vhci_hcd: release socket [ 287.915920][ T11] vhci_hcd: disconnect device 00:44:17 executing program 2: syz_io_uring_setup(0x55bb, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) 00:44:17 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x3a) [ 288.481702][ T38] audit: type=1400 audit(1667177057.674:170): avc: denied { connect } for pid=4183 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 00:44:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 00:44:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) set_mempolicy(0x3, &(0x7f0000000000)=0x80000001, 0x2) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0x33fe0) 00:44:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x0, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8a031040, &(0x7f0000000300)="e099e88cb2120f5f65b4c4289b83f82c090a3ca89ced4ed547f798cf72b9e23059b8f3036ad394ee46b83011083292686e63b6fc49abefde32c4aaa843da", 0x3e, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r4, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x0, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x8a025) 00:44:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x0, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8a031040, &(0x7f0000000300)="e099e88cb2120f5f65b4c4289b83f82c090a3ca89ced4ed547f798cf72b9e23059b8f3036ad394ee46b83011083292686e63b6fc49abefde32c4aaa843da", 0x3e, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r4, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x0, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x8a025) 00:44:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 00:44:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x0, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8a031040, &(0x7f0000000300)="e099e88cb2120f5f65b4c4289b83f82c090a3ca89ced4ed547f798cf72b9e23059b8f3036ad394ee46b83011083292686e63b6fc49abefde32c4aaa843da", 0x3e, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r4, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x0, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x8a025) 00:44:19 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x1, &(0x7f0000003880)) 00:44:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:19 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e28, @local}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x1, 0x2, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x3a) clock_gettime(0x0, &(0x7f0000003840)={0x0, 0x0}) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000200)=0x10000, 0x4) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001680)}, 0x7}, {{&(0x7f0000001740)=@qipcrtr, 0x80, 0x0}}, {{0x0, 0x0, 0x0}, 0xe9}], 0x3, 0x1, &(0x7f0000003880)={0x0, r1+10000000}) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000140)={0x2, 'veth1_to_hsr\x00', {}, 0x5}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000080)={0x2, 'ip6_vti0\x00', {}, 0x5}) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000001c0)='pim6reg1\x00') ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000280)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000140)={0x2, 'veth1_to_hsr\x00', {}, 0x5}) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{0x80000000}, 0x24}, 0x10) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f0000000180)={'vcan0\x00', @ifru_data=&(0x7f00000000c0)="4e2a1c178ec7b9c8f6b51b72c9c9cc492cbcabed7244ff847e68155e0594ef0a"}}) 00:44:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r5, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:19 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:19 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) [ 290.497463][ T38] audit: type=1400 audit(1667177059.684:171): avc: denied { setopt } for pid=4235 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 00:44:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x0, 0x3a) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) sendfile(r3, r1, 0x0, 0x8a025) 00:44:20 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x0, 0x3a) r1 = dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) sendfile(r3, r1, 0x0, 0x8a025) 00:44:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r5, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:20 executing program 2: syz_io_uring_setup(0x6f1a, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 00:44:20 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:20 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000500)={'ip_vti0\x00'}) 00:44:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 00:44:20 executing program 2: socket$rds(0x15, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xe9}], 0x2, 0x0, 0x0) syz_usbip_server_init(0x2) [ 291.525988][ T4271] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 291.530569][ T4271] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 291.547753][ T4271] vhci_hcd vhci_hcd.0: Device attached [ 291.574529][ T4272] vhci_hcd: connection closed [ 291.574761][ T11] vhci_hcd: stop threads [ 291.582803][ T11] vhci_hcd: release socket [ 291.587223][ T11] vhci_hcd: disconnect device 00:44:21 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) 00:44:21 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) 00:44:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r5, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:21 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:21 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vlan0\x00', 0x10) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f00000000c0)=0x1, 0x4) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x0, 0x33, 0x12, 0x0, 0xb, 0x2d, 0x2, 0xbb}) socketpair(0x18, 0x0, 0x3, &(0x7f0000000080)) [ 292.307512][ T38] audit: type=1400 audit(1667177061.494:172): avc: denied { setopt } for pid=4284 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 00:44:21 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000040)=@raw=[@generic, @func, @map_idx_val, @call, @func, @generic, @generic], &(0x7f0000000080)='syzkaller\x00', 0xac9a, 0x85, &(0x7f00000000c0)=""/133, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:44:21 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 292.383366][ T38] audit: type=1400 audit(1667177061.574:173): avc: denied { read } for pid=4291 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 00:44:21 executing program 2: socketpair(0x22, 0x0, 0x22, &(0x7f0000000000)) 00:44:21 executing program 2: set_mempolicy(0x5, &(0x7f0000000140)=0x1, 0x2) io_uring_setup(0x44ae, &(0x7f0000005840)={0x0, 0x93c3, 0x0, 0x2, 0x1a9}) 00:44:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:22 executing program 2: set_mempolicy(0x5, &(0x7f0000000140)=0x1, 0x2) io_uring_setup(0x44ae, &(0x7f0000005840)={0x0, 0x93c3, 0x0, 0x2, 0x1a9}) 00:44:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r9 = dup(r0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:22 executing program 2: syz_io_uring_setup(0x721c, &(0x7f00000004c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540), 0x0) syz_io_uring_setup(0x3b55, &(0x7f0000000140), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000200), &(0x7f00000005c0)) 00:44:22 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) 00:44:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x3781, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0xc}, 0x48) 00:44:22 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000280)=@framed={{}, [@cb_func]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:44:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:23 executing program 2: r0 = syz_io_uring_setup(0x2d6d, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x458e, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 00:44:23 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x55bb, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x132}, &(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 00:44:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:23 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='net/bnep\x00') 00:44:23 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) 00:44:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, r1, 0x0, &(0x7f0000000080)='./bus\x00', 0x100, 0x20282, 0x12345}, 0x20) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) [ 294.167101][ T38] audit: type=1400 audit(1667177063.354:174): avc: denied { accept } for pid=4333 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 00:44:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380), &(0x7f0000000100)) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:24 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, r1, 0x0, &(0x7f0000000080)='./bus\x00', 0x100, 0x20282, 0x12345}, 0x20) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:25 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, r1, 0x0, &(0x7f0000000080)='./bus\x00', 0x100, 0x20282, 0x12345}, 0x20) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:25 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:25 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, r1, 0x0, &(0x7f0000000080)='./bus\x00', 0x100, 0x20282, 0x12345}, 0x20) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, r1, 0x0, &(0x7f0000000080)='./bus\x00', 0x100, 0x20282, 0x12345}, 0x20) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 00:44:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, r1, 0x0, &(0x7f0000000080)='./bus\x00', 0x100, 0x20282, 0x12345}, 0x20) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 00:44:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:28 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:28 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:28 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, r1, 0x0, &(0x7f0000000080)='./bus\x00', 0x100, 0x20282, 0x12345}, 0x20) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) 00:44:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:29 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, r0, 0x0, &(0x7f0000000080)='./bus\x00', 0x100, 0x20282, 0x12345}, 0x20) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:30 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, r0, 0x0, &(0x7f0000000080)='./bus\x00', 0x100, 0x20282, 0x12345}, 0x20) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:30 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:31 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r6, r8, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, r0, 0x0, &(0x7f0000000080)='./bus\x00', 0x100, 0x20282, 0x12345}, 0x20) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:31 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:32 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:32 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:33 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:33 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:35 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:36 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:37 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:37 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:37 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) [ 308.350932][ C2] hpet: Lost 1 RTC interrupts 00:44:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:38 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:38 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:38 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:39 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:39 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:39 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:39 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:40 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:40 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:40 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:40 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:41 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:41 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:41 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:41 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r8 = dup(r0) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:41 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:42 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:42 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:43 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:43 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:43 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r7 = dup(r0) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x0, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x0, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x0, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:48 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:48 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:49 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:50 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) [ 323.462398][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.466685][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 00:44:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x0, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x0, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x0, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:53 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:54 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:55 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:56 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:58 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) [ 329.372608][ C2] hpet: Lost 4 RTC interrupts 00:44:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:59 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:59 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:44:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:00 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:00 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:01 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:01 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:02 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:03 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:04 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:05 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:05 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x0, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x0, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x0, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:06 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:07 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) [ 340.183220][ C2] hpet: Lost 3 RTC interrupts 00:45:09 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:10 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:10 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:11 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) [ 342.552072][ C2] hpet: Lost 1 RTC interrupts 00:45:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:13 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:13 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:14 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, 0x0) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:16 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x0, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x0, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x0, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:19 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:19 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:20 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:20 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:21 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:21 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:22 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, 0x0, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:24 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:25 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, 0x0, 0x0) 00:45:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:28 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, 0x0, 0x0) 00:45:28 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, 0x0, 0x0) 00:45:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:30 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:30 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r6 = syz_io_uring_setup(0x5d66, &(0x7f0000000240), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r7, r9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f0000004040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, r1, 0x0, &(0x7f0000000080)='./bus\x00', 0x100, 0x20282, 0x12345}, 0x20) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r10 = dup(r0) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:31 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:31 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:31 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000080)=""/101, 0x65}, {0x0, 0x9befff7f00000000}, {0x0}, {&(0x7f0000000240)=""/29, 0x1d}, {0x0}, {0x0}, {&(0x7f0000001380)=""/255, 0xff}, {0x0}, {&(0x7f0000001580)=""/208, 0xd0}], 0x9}}, {{&(0x7f0000001740)=@qipcrtr, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, &(0x7f0000003880)) 00:45:31 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000100)={0x7, 'pim6reg0\x00'}) 00:45:31 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000040)=@raw=[@generic, @func, @call, @func, @generic, @generic], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x85, &(0x7f00000000c0)=""/133, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:31 executing program 3: socketpair(0x22, 0x0, 0x26, &(0x7f0000000000)) 00:45:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:31 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x55bb, &(0x7f0000000100)={0x0, 0x0, 0x2}, &(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 00:45:31 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:32 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x496883, 0x0) 00:45:32 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, 0x0, 0x0) 00:45:32 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 00:45:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) [ 363.031000][ T38] audit: type=1400 audit(1667177132.214:175): avc: denied { read } for pid=5468 comm="syz-executor.3" name="ubi_ctrl" dev="devtmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 00:45:32 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001280)={0x2, 0x0, @dev}, 0x10) 00:45:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x3781, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0xc}, 0x48) 00:45:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0xaa}, @exit], &(0x7f0000000180)='GPL\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:33 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, 0x0, 0x0) 00:45:33 executing program 3: msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x61, 0x0) 00:45:33 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x400}]}) 00:45:33 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, 0x0, 0x40000}}, {{&(0x7f0000001740)=@qipcrtr, 0x80, 0x0}}], 0x2, 0x0, 0x0) 00:45:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:33 executing program 3: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x6}, 0x0, &(0x7f00000000c0)={0x0, 0xea60}) 00:45:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:33 executing program 3: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, 0x29, &(0x7f0000000200)=[{&(0x7f0000011860)='\x00\x00\x00', 0x3, 0x1}, {&(0x7f0000011b80)="04", 0x1, 0x4}, {&(0x7f00000006c0)='\a', 0x1, 0x5}, {&(0x7f00000007c0)="070003004e000100f4c428002600004d00000000b60000a56e0000003e00000101033ec71b573eaf8cc223bb83cf000000340000e50700000000d293f02e94b78c37e786b8927505000000000000", 0x4e, 0x6}, {&(0x7f0000001640)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0a8f9d59eabf7b40af24b0837ee0700000000000000000000000000000000a19105000300850001009230f001c20700000300000001000000002b4e5352303300000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000008e7f763a98974f16d6817d87ad06666528f4236128b27c47544c2720112e272f94ffea2e6dd5028999d34a08c509774457fd", 0xff, 0x800}, {&(0x7f0000010580)="080003007e0001000000f0018100"/32, 0x20, 0x98c}, {&(0x7f0000010000)="0042454130310100"/32, 0x20, 0x8000}, {&(0x7f0000000040)="004e535230330100"/17, 0x11, 0x8800}, {&(0x7f0000000740)="0054454130310100000002000062743584f3fa2900000000000000000000000000007b000100d46d71ac33647bd7386d4ed3fd4c94e215c40707b3595610682d60d7b678b7396db3f3293f33f815ae95", 0x50, 0x9000}, {&(0x7f0000010060)="0100030058000100e71bf001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010002000300010000000100000008313233343536373831323334353637384c696e757855444600"/128, 0x80, 0xc000}, {&(0x7f00000100e0)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667320322e33000000000000000000000000000010e607090c0c00354c0614002a4c696e7578205544464653000000000000000000000004050000", 0xe0, 0xc0c0}, {&(0x7f00000101c0)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000", 0x80, 0xc1e0}, {&(0x7f0000010240)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e75782055444646530000000000000000000000040500"/128, 0x80, 0xc2c0}, {&(0x7f00000102c0)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e007000000000000000000000000000000000000050003001e0001009230f001620000000300000001000000002b4e53523033000000000000000000000000000000000000000000000000000000000000000000000200"/192, 0xc0, 0xc3a0}, {&(0x7f0000010380)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e7578205544464653000000000000000000000004050000", 0x40, 0xc4a0}, {&(0x7f0000010400)="04000300cd0001006f01f0016400000005000000002a554446204c5620496e666f00000000000000000000000102040500000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000", 0x80, 0xc840}, {&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/32, 0x20, 0xc8e0}, {&(0x7f0000000640)="08000300620001000000f0016500"/32, 0x20, 0xca00}, {&(0x7f00000105a0)="00000300590001005f2d2801a0000000002a5544462053706172696e67205461066c65000000000001020405000000002000000000000000ffffffff20010000ffffffff40010000ffffffff60010000ffffffff80010000ffffffffa0010000ffffffffc0010000ffffffffe0010000ffffffff00020000ffffffff20020000ffffffff40020000ffffffff60020000ffffffff80020000ffffffffa0020000ffffffffc0020000ffffffffe0020000ffffffff00030000ffffffff20030000", 0xc0, 0xff40}, {&(0x7f00000104e0)="09000300130001004bc57600800000000010e607090c0c00366254040100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e757820554446465300000000000000000000000405000000000000050000000200000001020102010200"/160, 0xa0, 0x10000}, {&(0x7f00000106e0)="02000300fe0001008f77f00100010000004000006000000000400000c0070000", 0x20, 0x20000}, {&(0x7f0000001300)="0801030046e7ce20c0591d0000000000a002000054000000fefffffffefffffffeffffffffffffffffefffffffffffffffffffff0758a7b247c705bbffffffffffffffffffffffff95630effffffffffffffffffffffffffffffffff889952e5ffffff002300000000000000000000000000000000000000000000000000000000000052cb6a359208124b8d26b73dbd7c3080b7710bd35fa08676ff9ce7abe8927debdbb73162d6e3740e61f6a35c1e4f860fa8dfac2b2bd2dc7f99e596e41283365853aef80e6afe80170089120f998b815ede29bea822e4769a114c0fc498c3810fe201000bc0f5eb89ba8eaae47ad50639c4cd69", 0xf6, 0xa4000}, {&(0x7f0000010780)="00010300f3000100f0edf001200000000010e607090c0c00354c06140300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e757855444600000000000000", 0x80, 0xa8000}, {&(0x7f0000010800)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e7400000000010200000000000000000000000000000000000000000000000200004000"/256, 0x100, 0xa80e0}, {&(0x7f0000010900)="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"/352, 0x160, 0xac005}, {&(0x7f0000010a60)="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", 0x360, 0xb0000}, {&(0x7f0000000b00)="0a0103006e0001009e87d8006200000000000000040000000100000500000000000001000000000000000000a57c000001000000040000001a040000000000001a0400000000000003000000000000000010e67dbe0c0c00365c5a450010e607090c0c00365c5a450010e607090c0c00365c5a450010e607090c0c00365c5a4501000000000000000000000000000000000000000000000000200000000000000000000000000000002a4c696e757820554446465300000000000000000000000405000000000000110000000009000000000000100000001a04000063000000", 0xe0, 0xb0400}, {&(0x7f0000010ea0)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0xb0600}, {&(0x7f0000000c00)="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", 0x16a, 0xb0c00}, {&(0x7f00000113e0)="0a010300e6000100d6c8d2006700000000000000040000000100000500000000000003000000000000000000a57c000001000000000000000a000000000000000a0000000000000000000000000000000010e607090c0c00365c5a450010e607090c0c00365c5a450010e607090c0c00365c5a450010e607090c0c00365c5a4501000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578205544464653000000000000000000000004050000000000001300000000000000000000000a00000073797a6b616c6c65727300"/256, 0x100, 0xb0e00}, {&(0x7f0000000e00)="0a010300f90001004e5cd80068000000000000000400000001000005000000000000010000f2ff0000000000a57c000002000000000000002823000000000000282300000000000012000000000000000010e607090c0c00365c5a050010e607090c0c00365c5a450010e607090c0c00365c5a450010e607090c0c00365c5a4501000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7d782055444646530000000000000000000000040500000000000014000000000000000000000010000000282300006900000096241c7370f8", 0xe6, 0xb0ffc}, {&(0x7f00000115c0)="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", 0x140, 0xb3600}, {&(0x7f0000011700)="0a010300220001008348c8008000000000000000040000000100000500000000000000260b00000000000000a57c000001000000000000000000000000000000000000000000000000000010e607090c0c00354c06140010e607090c0c00354c06140010e607090c0c00354c06140010e607090c0c00354c061401000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e01002055444646530000000000000000000000040500"/224, 0xe0, 0xb4003}, {&(0x7f0000000840)="01000300bf000100e71bf001c00700000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010002000300010000000100000008313209343536373831323334353637384c696e7578554446000000ff0f00"/128, 0x80, 0xf8000}, {&(0x7f0000011940)="0000000000000000db000000000000000000000000000000000000000000000006000300c8000100fd10e801c107000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000", 0x80, 0xf81e2}, {&(0x7f0000002380)="00000000000000000000000000000000001b000900020000002a4f5354412055444620436f6d6a6c69616e0f50351bf4d1c38d98b459fd8f00000000459e910200002000000000000000000000004000000001000000002a4c696e75782055444646530000000078cce82834ec59e5927f455656867500000000000000040500000000ffe00006b6ea3e299ae87ec2efcab7a74d71467c7a481f22b431c00db0a4970991e19ddfca5059f967dd57272010bf5cb48c9b79c3f8767468692be9b7438fe703c8617c7971564b8b19b73a195059b906b0", 0xd5, 0xf82c0}, {&(0x7f0000011b00)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e7578205544464653000000000000000000000004050000", 0x40, 0xf84a0}, {&(0x7f0000011c00)="000000000000000000000000000000010000000900"/30, 0x1e, 0xf88df}, {&(0x7f0000011c20)="002a4c696e757820554446465300000000000000000000000405000000000000", 0x20, 0xf8960}, {&(0x7f0000000680)="08000300c90001000000f001c50700"/32, 0x20, 0xf8a00}, {&(0x7f00000009c0)="00000300a00001005f2d2801e0070000002a5544462053706172696e67205461626c65000000000001020405000000002000000000000000ffffffff20010000ffffffff40010000ffffffff60010000ffffffff80010000ffffffffa0010000ffffffffc0010000ffffffffe0010000ffffffff00020000ffffffff20020000ffffffff40020000ffffffff60020000ffffffff80020000ffffffffa0020000ffffffffc0020000ffffffffe0020000ffffffff00030000ffffffff20030000ffffffff40030000ffffffff60030000ffffffff80030000ffffffffa0030000ffffffffc0030000ffffffffe0030000ffffffff00040000ffffffff20040000ffffffff40040000ffffffff60040000ffffffff80040000ffffffffa0040000ffffffffc0040000ffffffffe0040000ffffffff000500"/320, 0x140, 0xfc000}], 0x100c090, &(0x7f0000000180)=ANY=[@ANYBLOB="6164696e696362000000006558458795ec411c0b6c65eb59d43c446fbaf85774652c73686f727461642c696f636861727365741326bf30000000392d342c646d6f64653d30303030303030303030300e30303030303030303030332c6769643d666f726765742c00"], 0x1) [ 364.503580][ T5501] loop3: detected capacity change from 0 to 2048 [ 364.518537][ T38] audit: type=1400 audit(1667177133.704:176): avc: denied { mounton } for pid=5500 comm="syz-executor.3" path="/syzkaller-testdir1737483056/syzkaller.6MeTHJ/152/bus" dev="sda1" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 364.539681][ T38] audit: type=1400 audit(1667177133.724:177): avc: denied { mount } for pid=5500 comm="syz-executor.3" name="/" dev="loop3" ino=1408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 364.558378][ T38] audit: type=1400 audit(1667177133.734:178): avc: denied { unmount } for pid=3744 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 00:45:33 executing program 3: socketpair(0x22, 0x0, 0x25, &(0x7f0000000000)) 00:45:33 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, 0x0, 0x0) 00:45:33 executing program 3: syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x4000) [ 364.764718][ T38] audit: type=1400 audit(1667177133.954:179): avc: denied { read } for pid=5508 comm="syz-executor.3" name="mouse0" dev="devtmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 364.791973][ T38] audit: type=1400 audit(1667177133.954:180): avc: denied { open } for pid=5508 comm="syz-executor.3" path="/dev/input/mouse0" dev="devtmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 00:45:34 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:45:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:34 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000003840)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000280)=""/230, 0xe6}, {0x0}, {0x0}, {&(0x7f0000001480)=""/212, 0xd4}, {0x0}], 0x9}}, {{0x0, 0x0, 0x0, 0xfb02}}], 0x2, 0x1, &(0x7f0000003880)={0x0, r1+10000000}) 00:45:34 executing program 3: shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000080)) 00:45:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:34 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_int(r0, 0x1, 0x1f, &(0x7f0000000580), &(0x7f0000000500)=0x4) 00:45:34 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x4000845) 00:45:34 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) getpeername(r0, 0x0, 0x0) 00:45:34 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000040)=@raw=[@generic, @func, @call, @generic], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:34 executing program 1: socketpair(0x6, 0x0, 0x0, &(0x7f00000001c0)) 00:45:34 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) [ 365.724220][ T38] audit: type=1400 audit(1667177134.914:181): avc: denied { create } for pid=5539 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 00:45:35 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="031ffbacec5c", @broadcast, @val, {@ipv4}}, 0x0) 00:45:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:35 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x400}]}) 00:45:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:35 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x81000) 00:45:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r4, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) dup(r5) sendfile(r4, r2, 0x0, 0x8a025) 00:45:35 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x6001, 0x0) 00:45:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) [ 366.284065][ T38] audit: type=1400 audit(1667177135.474:182): avc: denied { setopt } for pid=5550 comm="syz-executor.3" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 00:45:35 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'ip6_vti0\x00'}) 00:45:36 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000040)=@raw=[@func, @call, @func, @generic], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x3781}, 0x48) 00:45:36 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 00:45:36 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r4, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) dup(r5) sendfile(r4, r2, 0x0, 0x8a025) 00:45:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r4, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) dup(r5) sendfile(r4, r2, 0x0, 0x8a025) 00:45:36 executing program 3: socketpair(0x22, 0x0, 0x23, &(0x7f0000000000)) 00:45:36 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000140)=@raw=[@call={0x85, 0x0, 0x0, 0x10}, @exit], &(0x7f0000000180)='GPL\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:37 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r4, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) dup(r5) sendfile(r4, r2, 0x0, 0x8a025) 00:45:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:38 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r4, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) dup(r5) sendfile(r4, r2, 0x0, 0x8a025) 00:45:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:38 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(0x0, 0x2, 0x0) dup(r4) 00:45:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) 00:45:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:39 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:39 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:39 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:39 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:39 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:40 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) recvfrom(r3, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x0) 00:45:40 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:40 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:40 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:40 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:40 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008010) 00:45:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:41 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:41 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:41 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:41 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:41 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) 00:45:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:41 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:41 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) 00:45:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:41 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) socket$alg(0x26, 0x5, 0x0) 00:45:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) 00:45:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:42 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:45:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:43 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:43 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0xa, 0x4) 00:45:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:43 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000003c0)}, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:44 executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:44 executing program 1: r0 = socket(0x0, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:44 executing program 1: r0 = socket(0x0, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:45 executing program 1: r0 = socket(0x0, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:45 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x1010001) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:45 executing program 1: r0 = socket(0xa, 0x0, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:45 executing program 1: r0 = socket(0xa, 0x0, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:45 executing program 1: r0 = socket(0xa, 0x0, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:46 executing program 1: r0 = socket(0xa, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:46 executing program 1: r0 = socket(0xa, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:46 executing program 1: r0 = socket(0xa, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:46 executing program 1: socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:46 executing program 1: socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:46 executing program 1: socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x0, 0x6]}}, 0x5c) 00:45:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:46 executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) 00:45:46 executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) 00:45:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:46 executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) 00:45:47 executing program 1: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000b40)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 00:45:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x2}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:47 executing program 1: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200028, 0x1c, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000008000000008000000880000000f0000000500000034123412000100000903018000"/128, 0x80}, {&(0x7f0000010080)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f00000100a0)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f00000100c0)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000000180)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f00000006c0)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010140)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010160)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010180)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11e0}, {&(0x7f00000009c0)="d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000008000000008000000880000000f0000000500000034123412000100000903018000000000000000000000000000000000999a310f8ed3c465567828526da4ad76c229c61e1a0acbf4b60c293144cdec19d40acbbb2735895e50a3e1f3eeeb7e8000c749962173d0beebdbd364c341d3f753fc87e8451624b990c9dc861f2dd73ad5cc5e3df9c97616a5826cd0c01840bb96ac9e71231ad0d2fe8dce16c733ad819b749855cfeaa50aaca87c2b0f835a9c1041b229af764ffb3d3ce75769c18a4f4f6189be6b9588010f67d8a6216f1cd92db53277120ceea6", 0x31c, 0x1600}, {&(0x7f0000000d00)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1de0}, {&(0x7f0000010480)="e06c000000000000000000000000000000000000000055aa", 0x18, 0x1fe0}, {&(0x7f00000104a0)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x21e0}, {&(0x7f00000000c0)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x23e0}, {&(0x7f00000104e0)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x25e3}, {&(0x7f0000000040)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x27c0}, {&(0x7f0000010520)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x29e0}, {&(0x7f00000004c0)="d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911d0ab1911", 0x200, 0x2e00}, {&(0x7f0000010740)="f8ffffffffffffffffffffff04000000ffffffffffffffff0000000000000000", 0x20, 0x10000}, {&(0x7f0000000700)="ff0700"/32, 0x20, 0x11002}, {&(0x7f0000010780)="00000100020003000400050006000700080009000a000b000c000d000e000f0010001100120013001400150016001700180019001a001b001c001d001e001f0020002100220023002400250026002700280029002a002b002c002d002e002f0030003100320033003400350036003700380039003a003b003c003d003e003f0040004100420043004400450046004700480049004a004b004c004d004e004f0050005100520053005400550056005700580059005a005b005c005d005e005f0060004100420043004400450046004700480049004a004b004c004d004e004f0050005100520053005400550056005700580059005a007b007c007d007e007f0080008100820083008400850086008700880089008a008b008c008d008e008f0090009100920093009400950096009700980099009a009b009c009d009e009f00a000a100a200a300a400a500a600a700a800a900aa00ab00ac00ad00ae00af00b000b100b200b300b400b500b600b700b800b900ba00bb00bc00bd00be00bf00c000c100c200c300c400c500c600c700c800c900ca00cb00cc00cd00ce00cf00d000d100d200d300d400d500d600d700d800d900da00db00dc00dd00de00df00c000c100c200c300c400c500c600c700c800c900ca00cb00cc00cd00ce00cf00d000d100d200d300d400d500d600f700d800d900da00db00dc00dd00de00780100010001020102010401040106010601080108010a010a010c010c010e010e0110011001120112011401140116011601180118011a011a011c011c011e011e0120012001220122012401240126012601280128012a012a012c012c012e012e01300131013201320134013401360136013801390139013b013b013d013d013f013f014101410143014301450145014701470149014a014a014c014c014e014e0150015001520152015401540156015601580158015a015a015c015c015e015e0160016001620162016401640166016601680168016a016a016c016c016e016e01700170017201720174017401760176017801790179017b017b017d017d017f0143028101820182018401840186018701870189018a018b018b018d018e018f0190019101910193019401f60196019701980198013d029b019c019d0120029f01a001a001a201a201a401a401a601a701a701a901aa01ab01ac01ac01ae01af01af01b101b201b301b301b501b501b701b801b801ba01bb01bc01bc01be01f701c001c101c201c301c401c501c401c701c801c701ca01cb01ca01cd01cd01cf01cf01d101d101d301d301d501d501d701d701d901d901db01db018e01de01de01e001e001e201e201e401e401e601e601e801e801ea01ea01ec01ec01ee01ee01f001f101f201f101f401f401f601f701f801f801fa01fa01fc01fc01fe01fe0100020002020202020402040206020602080208020a020a020c020c020e020e0210021002120212021402140216021602180218021a021a021c021c021e021e0220022102220222022402240226022602280228022a022a022c022c022e022e023002300232023202340235023602370238023902652c3b023b023d02662c3f0240024102410243024402450246024602480248024a024a024c024c024e024e0250025102520281018601550289018a0158028f015a0290015c025d025e025f0293016102620294016402650266026702970196016a02622c6c026d026e029c01700271029d01730274029f0176027702780279027a027b027c02642c7e027f02a60181028202a9018402850286028702ae014402b101b20145028d028e028f0290029102b70193029402950296029702980299029a029b029c029d029e029f02a002a102a202a302a402a502a602a702a802a902aa02ab02ac02ad02ae02af02b002b102b202b302b402b502b602b702b802b902ba02bb02bc02bd02be02bf02c002c102c202c302c402c502c602c702c802c902ca02cb02cc02cd02ce02cf02d002d102d202d302d402d502d602d702d802d902da02db02dc02dd02de02df02e002e102e202e302e402e502e602e702e802e902ea02eb02ec02ed02ee02ef02f002f102f202f302f402f502f602f702f802f902fa02fb02fc02fd02fe02ff0200030103020303030403050306030703080309030a030b030c030d030e030f0310031103120313031403150316031703180319031a031b031c031d031e031f0320032103220323032403250326032703280329032a032b032c032d032e032f0330033103320333033403350336033703380339033a033b033c033d033e033f0340034103420343034403450346034703480349034a034b034c034d034e034f0350035103520353035403550356035703580359035a035b035c035d035e035f0360036103620363036403650366036703680369036a036b036c036d036e036f0370037103720373037403750376037703780379037a03fd03fe03ff037e037f0380038103820383038403850386038703880389038a038b038c038d038e038f0390039103920393039403950396039703980399039a039b039c039d039e039f03a003a103a203a303a403a503a603a703a803a903aa03ab038603880389038a03b0039103920393039403950396039703980399039a039b039c039d039e039f03a003a103a303a303a403a503a603a703a803a903aa03ab038c038e038f03cf03d003d103d203d303d403d503d603d703d803d803da03da03dc03dc03de03de03e003e003e203e203e403e403e603e603e803e803ea03ea03ec03ec03ee03ee03f003f103f903f303f403f503f603f703f703f903fa03fa03fc03fd03fe03ff0300040104020403040404050406040704080409040a040b040c040d040e040f0410041104120413041404150416041704180419041a041b041c041d041e041f0420042104220423042404250426042704280429042a042b042c042d042e042f0410041104120413041404150416041704180419041a041b041c041d041e041f0420042104220423042404250426042704280429042a042b042c042d042e042f0400040104020403040404050406040704080409040a040b040c040d040e040f0460046004620462046404640466046604680468046a046a046c046c046e046e0470047004720472047404740476047604780478047a047a047c047c047e047e0480048004820483048404850486048704880489048a048a048c048c048e048e0490049004920492049404940496049604980498049a049a049c049c049e049e04a004a004a204a204a404a404a604a604a804a804aa04aa04ac04ac04ae04ae04b004b004b204b204b404b404b604b604b804b804ba04ba04bc04bc04be04be04c004c104c104c304c304c504c504c704c704c904c904cb04cb04cd04cd04c004d004d004d204d204d404d404d604d604d804d804da04da04dc04dc04de04de04e004e004e204e204e404e404e604e604e804e804ea04ea04ec04ec04ee04ee04f004f004f204f204f404f404f604f604f804f804fa04fa04fc04fc04fe04fe0400050005020502050405040506050605080508050a050a050c050c050e050e0510051005120512051405150516051705180519051a051b051c051d051e051f0520052105220523052405250526052705280529052a052b052c052d052e052f0530053105320533053405350536053705380539053a053b053c053d053e053f0540054105420543054405450546054705480549054a054b054c054d054e054f0550055105520553055405550556055705580559055a055b055c055d055e055f0560053105320533053405350536053705380539053a053b053c053d053e053f0540054105420543054405450546054705480549054a054b054c054d054e054f055005510552055305540555055605fffff617632c7e1d7f1d801d811d821d831d841d851d861d871d881d891d8a1d8b1d8c1d8d1d8e1d8f1d901d911d921d931d941d951d961d971d981d991d9a1d9b1d9c1d9d1d9e1d9f1da01da11da21da31da41da51da61da71da81da91daa1dab1dac1dad1dae1daf1db01db11db21db31db41db51db61db71db81db91dba1dbb1dbc1dbd1dbe1dbf1dc01dc11dc21dc31dc41dc51dc61dc71dc81dc91dca1dcb1dcc1dcd1dce1dcf1dd01dd11dd21dd31dd41dd51dd61dd71dd81dd91dda1ddb1ddc1ddd1dde1ddf1de01de11de21de31de41de51de61de71de81de91dea1deb1dec1ded1dee1def1df01df11df21df31df41df51df61df71df81df91dfa1dfb1dfc1dfd1dfe1dff1d001e001e021e021e041e041e061e061e081e081e0a1e0a1e0c1e0c1e0e1e0e1e101e101e121e121e141e141e161e161e181e181e1a1e1a1e1c1e1c1e1e1e1e1e201e201e221e221e241e241e261e261e281e281e2a1e2a1e2c1e2c1e2e1e2e1e301e301e321e321e341e341e361e361e381e381e3a1e3a1e3c1e3c1e3e1e3e1e401e401e421e421e441e441e461e461e481e481e4a1e4a1e4c1e4c1e4e1e4e1e501e501e521e521e541e541e561e561e581e581e5a1e5a1e5c1e5c1e5e1e5e1e601e601e621e621e641e641e661e661e681e681e6a1e6a1e6c1e6c1e6e1e6e1e701e701e721e721e741e741e761e761e781e781e7a1e7a1e7c1e7c1e7e1e7e1e801e801e821e821e841e841e861e861e881e881e8a1e8a1e8c1e8c1e8e1e8e1e901e901e921e921e941e941e961e971e981e991e9a1e9b1e9c1e9d1e9e1e9f1ea01ea01ea21ea21ea41ea41ea61ea61ea81ea81eaa1eaa1eac1eac1eae1eae1eb01eb01eb21eb21eb41eb41eb61eb61eb81eb81eba1eba1ebc1ebc1ebe1ebe1ec01ec01ec21ec21ec41ec41ec61ec61ec81ec81eca1eca1ecc1ecc1ece1ece1ed01ed01ed21ed21ed41ed41ed61ed61ed81ed81eda1eda1edc1edc1ede1ede1ee01ee01ee21ee21ee41ee41ee61ee61ee81ee81eea1eea1eec1eec1eee1eee1ef01ef01ef21ef21ef41ef41ef61ef61ef81ef81efa1efb1efc1efd1efe1eff1e081f091f0a1f0b1f0c1f0d1f0e1f0f1f081f091f0a1f0b1f0c1f0d1f0e1f0f1f181f191f1a1f1b1f1c1f1d1f161f171f181f191f1a1f1b1f1c1f1d1f1e1f1f1f281f291f2a1f2b1f2c1f2d1f2e1f2f1f281f291f2a1f2b1f2c1f2d1f2e1f2f1f381f391f3a1f3b1f3c1f3d1f3e1f3f1f381f391f3a1f3b1f3c1f3d1f3e1f3f1f481f491f4a1f4b1f4c1f4d1f461f471f481f491f4a1f4b1f4c1f4d1f4e1f4f1f501f591f521f5b1f541f5d1f561f5f1f581f591f5a1f5b1f5c1f5d1f5e1f5f1f681f691f6a1f6b1f6c1f6d1f6e1f6f1f681f691f6a1f6b1f6c1f6d1f6e1f6f1fba1fbb1fc81fc91fca1fcb1fda1fdb1ff81ff91fea1feb1ffa1ffb1f7e1f7f1f881f891f8a1f8b1f8c1f8d1f8e1f8f1f881f891f8a1f8b1f8c1f8d1f8e1f8f1f981f991f9a1f9b1f9c1f9d1f9e1f9f1f981f991f9a1f9b1f9c1f9d1f9e1f9f1fa81fa91faa1fab1fac1fad1fae1faf1fa81fa91faa1fab1fac1fad1fae1faf1fb81fb91fb21fbc1fb41fb51fb61fb71fb81fb91fba1fbb1fbc1fbd1fbe1fbf1fc01fc11fc21fc31fc41fc51fc61fc71fc81fc91fca1fcb1fc31fcd1fce1fcf1fd81fd91fd21fd31fd41fd51fd61fd71fd81fd91fda1fdb1fdc1fdd1fde1fdf1fe81fe91fe21fe31fe41fec1fe61fe71fe81fe91fea1feb1fec1fed1fee1fef1ff01ff11ff21ff31ff41ff51ff61ff71ff81ff91ffa1ffb1ff31ffd1ffe1fff1f00200120022003200420052006200720082009200a200b200c200d200e200f2010201120122013201420152016201720182019201a201b201c201d201e201f2020202120222023202420252026202720282029202a202b202c202d202e202f2030203120322033203420352036203720382039203a203b203c203d203e203f2040204120422043204420452046204720482049204a204b204c204d204e204f2050205120522053205420552056205720582059205a205b205c205d205e205f2060206120622063206420652066206720682069206a206b206c206d206e206f2070207120722073207420752076207720782079207a207b207c207d207e207f2080208120822083208420852086208720882089208a208b208c208d208e208f2090209120922093209420952096209720982099209a209b209c209d209e209f20a020a120a220a320a420a520a620a720a820a920aa20ab20ac20ad20ae20af20b020b120b220b320b420b520b620b720b820b920ba20bb20bc20bd20be20bf20c020c120c220c320c420c520c620c720c820c920ca20cb20cc20cd20ce20cf20d020d120d220d320d420d520d620d720d820d920da20db20dc20dd20de20df20e020e120e220e320e420e520e620e720e820e920ea20eb20ec20ed20ee20ef20f020f120f220f320f420f520f620f720f820f920fa20fb20fc20fd20fe20ff2000210121022103210421052106210721082109210a210b210c210d210e210f2110211121122113211421152116211721182119211a211b211c211d211e211f2120212121222123212421252126212721282129212a212b212c212d212e212f2130213121322133213421352136213721382139213a213b213c213d213e213f2140214121422143214421452146214721482149214a214b214c214d2132214f2150215121522153215421552156215721582159215a215b215c215d215e215f2160216121622163216421652166216721682169216a216b216c216d216e216f2160216121622163216421652166216721682169216a216b216c216d216e216f2180218121822183218321ffff4b03b624b724b824b924ba24bb24bc24bd24be24bf24c024c124c224c324c424c524c624c724c824c924ca24cb24cc24cd24ce24cf24ffff4607002c012c022c032c042c052c062c072c082c092c0a2c0b2c0c2c0d2c0e2c0f2c102c112c122c132c142c152c162c172c182c192c1a2c1b2c1c2c1d2c1e2c1f2c202c212c222c232c242c252c262c272c282c292c2a2c2b2c2c2c2d2c2e2c5f2c602c602c622c632c642c652c662c672c672c692c692c6b2c6b2c6d2c6e2c6f2c702c712c722c732c742c752c752c772c782c792c7a2c7b2c7c2c7d2c7e2c7f2c802c802c822c822c842c842c862c862c882c882c8a2c8a2c8c2c8c2c8e2c8e2c902c902c922c922c942c942c962c962c982c982c9a2c9a2c9c2c9c2c9e2c9e2ca02ca02ca22ca22ca42ca42ca62ca62ca82ca82caa2caa2cac2cac2cae2cae2cb02cb02cb22cb22cb42cb42cb62cb62cb82cb82cba2cba2cbc2cbc2cbe2cbe2cc02cc02cc22cc22cc42cc42cc62cc62cc82cc82cca2cca2ccc2ccc2cce2cce2cd02cd02cd22cd22cd42cd42cd62cd62cd82cd82cda2cda2cdc2cdc2cde2cde2ce02ce02ce22ce22ce42ce52ce62ce72ce82ce92cea2ceb2cec2ced2cee2cef2cf02cf12cf22cf32cf42cf52cf62cf72cf82cf92cfa2cfb2cfc2cfd2cfe2cff2ca010a110a210a310a410a510a610a710a810a910aa10ab10ac10ad10ae10af10b010b110b210b310b410b510b610b710b810b910ba10bb10bc10bd10be10bf10c010c110c210c310c410c510ffff1bd221ff22ff23ff24ff25ff26ff27ff28ff29ff2aff2bff2cff2dff2eff2fff30ff31ff32ff33ff34ff35ff36ff37ff38ff39ff3aff5bff5cff5dff5eff5fff60ff61ff62ff63ff64ff65ff66ff67ff68ff69ff6aff6bff6cff6dff6eff6fff70ff71ff72ff73ff74ff75ff76ff77ff78ff79ff7aff7bff7cff7dff7eff7fff80ff81ff82ff83ff84ff85ff86ff87ff88ff89ff8aff8bff8cff8dff8eff8fff90ff91ff92ff93ff94ff95ff96ff97ff98ff99ff9aff9bff9cff9dff9eff9fffa0ffa1ffa2ffa3ffa4ffa5ffa6ffa7ffa8ffa9ffaaffabffacffadffaeffafffb0ffb1ffb2ffb3ffb4ffb5ffb6ffb7ffb8ffb9ffbaffbbffbcffbdffbeffbfffc0ffc1ffc2ffc3ffc4ffc5ffc6ffc7ffc8ffc9ffcaffcbffccffcdffceffcfffd0ffd1ffd2ffd3ffd4ffd5ffd6ffd7ffd8ffd9ffdaffdbffdcffddffdeffdfffe0ffe1ffe2ffe3ffe4ffe5ffe6ffe7ffe8ffe9ffeaffebffecffedffeeffeffff0fff1fff2fff3fff4fff5fff6fff7fff8fff9fffafffbfffcfffdfffeffffff00"/5856, 0x16e0, 0x12000}, {&(0x7f0000011e60)="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"/480, 0x1e0, 0x14000}, {&(0x7f0000000740)="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", 0x143, 0x15000}, {&(0x7f00000120a0)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x15ffd}, {&(0x7f00000008c0)="73797a6b616c6c65727300040000000000000000fdffd5a8f1643cc29a8747620da99ff933f83ae1314c50c0bd1503582d1e1a15ca8167b9d59cff2164221ad426a34bd9a9faeacc11767d9b9a80644408d45e981d0a72bbf2fc8547f5043a90dda17c1bcb61e1a38647caed772734431f87918f7da1fd9602cade518889134636d49c10f6a0200ec2d8b43e60d6b02fb7cd3537ff04f7164ef4649dbc209352ef4498330956abb108d6f3f761a8c69e611521663887f2af3aea8e6a0ebb67cbabc6", 0xc2, 0x17000}, {&(0x7f00000124e0)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x1b000}, {&(0x7f0000010440)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x200005}], 0x0, &(0x7f0000001040)=ANY=[], 0x1) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000041) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) [ 378.519125][ T5936] loop1: detected capacity change from 0 to 4096 [ 378.545117][ T38] audit: type=1400 audit(1667177147.734:183): avc: denied { write } for pid=5934 comm="syz-executor.1" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 378.564634][ T38] audit: type=1400 audit(1667177147.734:184): avc: denied { remove_name } for pid=5934 comm="syz-executor.1" name="file1" dev="loop1" ino=1048592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 378.568765][ T5936] exFAT-fs (loop1): hint_cluster is invalid (17) [ 378.578845][ T38] audit: type=1400 audit(1667177147.734:185): avc: denied { rename } for pid=5934 comm="syz-executor.1" name="file1" dev="loop1" ino=1048592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 378.578878][ T38] audit: type=1400 audit(1667177147.734:186): avc: denied { add_name } for pid=5934 comm="syz-executor.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 00:45:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) [ 378.578896][ T38] audit: type=1400 audit(1667177147.754:187): avc: denied { read write } for pid=5934 comm="syz-executor.1" name="bus" dev="loop1" ino=1048592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 378.578917][ T38] audit: type=1400 audit(1667177147.754:188): avc: denied { open } for pid=5934 comm="syz-executor.1" path="/syzkaller-testdir4184560459/syzkaller.Q8nWAd/205/file0/bus" dev="loop1" ino=1048592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 378.578938][ T38] audit: type=1800 audit(1667177147.754:189): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048592 res=0 errno=0 [ 378.625291][ C2] hpet: Lost 1 RTC interrupts 00:45:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:47 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, 0x0) [ 378.707033][ T38] audit: type=1804 audit(1667177147.894:190): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir4184560459/syzkaller.Q8nWAd/205/file0/bus" dev="loop1" ino=1048592 res=1 errno=0 [ 378.724392][ T38] audit: type=1400 audit(1667177147.914:191): avc: denied { unmount } for pid=3708 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 00:45:47 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000040)=@raw=[@generic, @func, @map_idx_val, @call, @func, @generic, @generic], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x85, &(0x7f00000000c0)=""/133, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x700}) r5 = dup(r0) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:48 executing program 1: msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x61, 0x0) 00:45:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 00:45:48 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x14}, 0x14}}, 0x0) 00:45:48 executing program 1: rename(&(0x7f00000001c0)='\x00', 0x0) 00:45:48 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:48 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 00:45:48 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x1, &(0x7f0000000280)=@raw=[@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:49 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@exit]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x93, &(0x7f0000000240)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x0, &(0x7f0000000180)={0x1, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 00:45:49 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) 00:45:49 executing program 1: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 00:45:49 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:45:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:49 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) 00:45:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, 0x0) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write$binfmt_script(r0, 0x0, 0x113) 00:45:50 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/4096, 0x20001000) 00:45:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x0, 0x0, 0x700}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, 0x0, 0x0) 00:45:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 00:45:51 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/4096, 0x20001000) 00:45:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x4, &(0x7f0000001580)=@framed={{}, [@jmp]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:51 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000180)={0xe84, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "80fd5bbcef3ac92f35"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "3f3f9edd6ccf20bf3ca00b706dc644daa58d5d98dc66ea724698331f6b5a6fb8d7976715546e43e9a7c7a5c7dbb4d11dd832f74b74f165523f0c76d0cb3da1ee15786dcd6c2e61405a51487c1cd26b04783916115d958c4b9cd11a2dee84f0318c3987dc81d213825c923fe568ee7bddfbdb0f89a50173fee5d6f8adc0eb58a8f6be9d5d6b03be702bcbac2ceee353aee404bfb3bf9cf16a7fd00cd00f609c0a4b1e4a3e30a248a0bfe695cbd95c8107d6be0d7d5819f154c6"}, @INET_DIAG_REQ_BYTECODE={0xcd9, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "769b7da31a7b8df8a81a03e4586bdb697aa9f7bb2e5c7244b21914c67c961b95a45722ee1065e3876a33f862c8c8fa91c4f9b185c8af4267d9421871ca2821a7a6e70952b7af01c3c0bba68c056730f00b960c358df5ca23de3ea579c0a8a19d56bf4f9ecf7c3708e823724fd8219df7d2c9f57b8be64fd6bd3477849fcf4892165ff4cdf02b"}]}, 0xe84}}, 0x0) 00:45:51 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 00:45:51 executing program 3: mknod(&(0x7f0000000040)='./file0\x00', 0xc000, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x8c140, 0x0) 00:45:51 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4004031, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x4004031, 0xffffffffffffffff, 0x8000000) 00:45:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, 0x0, 0x0) 00:45:51 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:52 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/4096, 0x20001000) 00:45:52 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 00:45:52 executing program 3: io_setup(0x7ff, &(0x7f00000003c0)) io_setup(0x800, &(0x7f0000000240)) 00:45:52 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:52 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:52 executing program 3: lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 00:45:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x2}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, 0x0, 0x0) 00:45:52 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000140)="05e8", 0x2, r0) [ 383.653755][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 383.654119][ T38] audit: type=1400 audit(1667177152.844:201): avc: denied { write } for pid=6061 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 00:45:52 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/4096, 0x20001000) 00:45:52 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:52 executing program 3: syz_clone3(0x0, 0x0) syz_clone(0x44000000, 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff3") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:45:53 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000700)=@raw=[@map_fd, @map_val], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:53 executing program 3: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) getdents64(r0, 0x0, 0x0) [ 383.989598][ T6081] loop3: detected capacity change from 0 to 264192 [ 384.001423][ T6081] erofs: (device loop3): mounted with root inode @ nid 36. 00:45:53 executing program 3: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) getdents64(r0, 0x0, 0x0) [ 384.534775][ T6083] loop3: detected capacity change from 0 to 264192 [ 384.542387][ T6083] erofs: (device loop3): mounted with root inode @ nid 36. 00:45:53 executing program 0: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) getdents64(r0, 0x0, 0x0) [ 384.564904][ T6085] loop0: detected capacity change from 0 to 264192 [ 384.584754][ T6085] erofs: (device loop0): mounted with root inode @ nid 36. 00:45:53 executing program 3: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="e2e1f5e06fba1d88030000000c0024000700000000000000e80300000000000000000000020000000000000000000000fc4f50b963674e1c88d99f66ca7a77a10000000000000000000000000000000001000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c04100007400000000000000ffffffff0000000080761000535f0100e8030000000000000000000003000000000000000000000000000000000000002400000000000000540002002400000000000000550002002a00000000000000570001003000000000000000600002005b00000000000000650001005f000000000000006a0001005f000000000000006f0001002e2e2e66696c652e636f6c6466696c653066696c653166696c653266696c653300000000000000000000000005000000ed8100006400000000000000ffffffff0100000080761000535f0100e80300000000000000000000010000000000000000000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c6572730000000000000000000000000000000000000000000000000000000005000000ed4100003d00000000000000ffffffff0200000080761000535f0100e8030000000000000000000002000000000000000000000000000000000000003000000000000000300002002400000000000000310002003400000000000000330001005700000000000000380007002e2e2e66696c653066696c653100000005000000ed8100001a04000000000000ffffffff0300000080761000535f0100e80300000000000000000000010000000000000000000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c00000000000005000000ffa100002700000000000000ffffffff0400000080761000535f0100e8030000000000000000000001000000000000000000000000000000000000002f746d702f73797a2d696d61676567656e323830373731343739322f66696c65302f66696c65300000000000000000000000000000000000000000000000000005000900ed8100000a00000000000000ffffffff0500000080761000535f0100e803000000000000000000000100000000000000000000000000000000000000000000000000000000000000060106007861747472317861747472310601060078617474723278617474723273797a6b616c6c6572730000000000000000000007000000ed8100002823000000000000010000000600000080761000535f0100e80300000000000000000000020000000000000000000000000000000000000000000000010000000010012000000000280300000100"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) getdents64(r0, 0x0, 0x0) 00:45:53 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1}) r1 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r1, 0x450e, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000180)={0x1}) r5 = dup(0xffffffffffffffff) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:53 executing program 0: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) getdents64(r0, 0x0, 0x0) [ 384.643883][ T6088] loop3: detected capacity change from 0 to 264192 00:45:53 executing program 1: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) getdents64(r0, 0x0, 0x0) [ 384.661416][ T6088] erofs: (device loop3): mounted with root inode @ nid 36. [ 384.666210][ T6091] loop0: detected capacity change from 0 to 264192 [ 384.671948][ T6093] loop1: detected capacity change from 0 to 264192 00:45:53 executing program 3: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) getdents64(r0, 0x0, 0x0) [ 384.683655][ T6091] erofs: (device loop0): mounted with root inode @ nid 36. 00:45:53 executing program 0: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) getdents64(r0, 0x0, 0x0) [ 384.704596][ T6095] loop3: detected capacity change from 0 to 264192 [ 384.708872][ T6093] erofs: (device loop1): mounted with root inode @ nid 36. [ 384.715186][ T6095] erofs: (device loop3): mounted with root inode @ nid 36. 00:45:53 executing program 1: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="e2e1f5e06fba1d88030000000c0024000700000000000000e80300000000000000000000020000000000000000000000fc4f50b963674e1c88d99f66ca7a77a10000000000000000000000000000000001000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c04100007400000000000000ffffffff0000000080761000535f0100e8030000000000000000000003000000000000000000000000000000000000002400000000000000540002002400000000000000550002002a00000000000000570001003000000000000000600002005b00000000000000650001005f000000000000006a0001005f000000000000006f0001002e2e2e66696c652e636f6c6466696c653066696c653166696c653266696c653300000000000000000000000005000000ed8100006400000000000000ffffffff0100000080761000535f0100e80300000000000000000000010000000000000000000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c6572730000000000000000000000000000000000000000000000000000000005000000ed4100003d00000000000000ffffffff0200000080761000535f0100e8030000000000000000000002000000000000000000000000000000000000003000000000000000300002002400000000000000310002003400000000000000330001005700000000000000380007002e2e2e66696c653066696c653100000005000000ed8100001a04000000000000ffffffff0300000080761000535f0100e80300000000000000000000010000000000000000000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c00000000000005000000ffa100002700000000000000ffffffff0400000080761000535f0100e8030000000000000000000001000000000000000000000000000000000000002f746d702f73797a2d696d61676567656e323830373731343739322f66696c65302f66696c65300000000000000000000000000000000000000000000000000005000900ed8100000a00000000000000ffffffff0500000080761000535f0100e803000000000000000000000100000000000000000000000000000000000000000000000000000000000000060106007861747472317861747472310601060078617474723278617474723273797a6b616c6c6572730000000000000000000007000000ed8100002823000000000000010000000600000080761000535f0100e80300000000000000000000020000000000000000000000000000000000000000000000010000000010012000000000280300000100"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) getdents64(r0, 0x0, 0x0) [ 384.747328][ T6099] loop1: detected capacity change from 0 to 264192 00:45:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000004c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='xprtrdma_err_chunk\x00'}, 0x10) mount$9p_rdma(&(0x7f0000000100), &(0x7f00000003c0)='./file0\x00', &(0x7f00000005c0), 0x1000000, &(0x7f0000000a80)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e20,timeout=0xfffffffffffff359,rq=0x0000000000000fff,cache=none,sq=0x000000000000099e,rq=0x0000000000000001,rq=0x0000000000000800,timeout=0x0000000000000017,sq=0x0000000000000007,sq=0x0000000000000000,rq=0x0000000000000005,hash,uid=', @ANYRESDEC=0xee00, @ANYBLOB=',dont_a=:,uid<\x00'/30, @ANYRESDEC=0x0, @ANYBLOB=',context=staff_u,permit_directio,dont_measure,\x00']) [ 384.760822][ T6099] erofs: (device loop1): mounted with root inode @ nid 36. 00:45:53 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) [ 384.798482][ T38] audit: type=1400 audit(1667177153.994:202): avc: denied { setattr } for pid=6103 comm="syz-executor.3" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 384.843304][ T38] audit: type=1400 audit(1667177154.034:203): avc: denied { mounton } for pid=6101 comm="syz-executor.0" path="/syzkaller-testdir3572424375/syzkaller.u8ltyz/186/file0" dev="sda1" ino=1155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 384.891506][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.895852][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 00:45:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:54 executing program 1: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) getdents64(r0, 0x0, 0x0) 00:45:54 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x1, &(0x7f0000000040)=@raw=[@generic={0x1}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 385.507093][ T6111] loop1: detected capacity change from 0 to 264192 00:45:54 executing program 3: request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x0) [ 385.513617][ T6111] erofs: (device loop1): mounted with root inode @ nid 36. 00:45:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000055c0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001440)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x8, [@dev, @broadcast]}]}}}], 0x20}}], 0x1, 0x0) 00:45:54 executing program 3: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) 00:45:54 executing program 1: keyctl$KEYCTL_WATCH_KEY(0x1b, 0x0, 0xffffffffffffffff, 0x0) 00:45:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000004c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='xprtrdma_err_chunk\x00'}, 0x10) mount$9p_rdma(&(0x7f0000000100), &(0x7f00000003c0)='./file0\x00', &(0x7f00000005c0), 0x1000000, &(0x7f0000000a80)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e20,timeout=0xfffffffffffff359,rq=0x0000000000000fff,cache=none,sq=0x000000000000099e,rq=0x0000000000000001,rq=0x0000000000000800,timeout=0x0000000000000017,sq=0x0000000000000007,sq=0x0000000000000000,rq=0x0000000000000005,hash,uid=', @ANYRESDEC=0xee00, @ANYBLOB=',dont_a=:,uid<\x00'/30, @ANYRESDEC=0x0, @ANYBLOB=',context=staff_u,permit_directio,dont_measure,\x00']) 00:45:55 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@exit]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x93, &(0x7f0000000240)=""/147, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x7, 0x1ff, 0x5}, 0x10}, 0x80) 00:45:55 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x0, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x0, 0x29}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:55 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:55 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000740)=r0) 00:45:55 executing program 3: syz_clone(0x44000000, &(0x7f0000001480), 0x0, 0x0, &(0x7f0000001500), 0x0) 00:45:55 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x4, &(0x7f0000001580)=@framed={{}, [@jmp={0x5, 0x0, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:55 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, 0x0, 0x0) 00:45:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x14}, 0x14}}, 0x0) 00:45:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000004c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='xprtrdma_err_chunk\x00'}, 0x10) mount$9p_rdma(&(0x7f0000000100), &(0x7f00000003c0)='./file0\x00', &(0x7f00000005c0), 0x1000000, &(0x7f0000000a80)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e20,timeout=0xfffffffffffff359,rq=0x0000000000000fff,cache=none,sq=0x000000000000099e,rq=0x0000000000000001,rq=0x0000000000000800,timeout=0x0000000000000017,sq=0x0000000000000007,sq=0x0000000000000000,rq=0x0000000000000005,hash,uid=', @ANYRESDEC=0xee00, @ANYBLOB=',dont_a=:,uid<\x00'/30, @ANYRESDEC=0x0, @ANYBLOB=',context=staff_u,permit_directio,dont_measure,\x00']) 00:45:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 00:45:56 executing program 3: r0 = gettid() process_vm_readv(r0, &(0x7f0000000440)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/132, 0x84}, {0x0}], 0x2, 0x0) 00:45:56 executing program 1: io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100)={&(0x7f00000000c0)={[0x800]}, 0x8}) 00:45:56 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x38}}, 0x0) 00:45:56 executing program 3: syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x71, 0xa9, 0xa3, 0x20, 0x403, 0xdf32, 0x339b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x18, 0x77, 0x29, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x20}}, {{0x9, 0x5, 0x0, 0x1, 0x8}}, {}, {{0x9, 0x5, 0x80, 0x1, 0x20}}]}}]}}]}}, 0x0) 00:45:56 executing program 1: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) open(0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000300)=""/198, 0xc6) [ 387.258389][ T6156] loop1: detected capacity change from 0 to 264192 [ 387.268031][ T6156] erofs: (device loop1): mounted with root inode @ nid 36. 00:45:56 executing program 1: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) open(0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000300)=""/198, 0xc6) 00:45:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000004c0)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='xprtrdma_err_chunk\x00'}, 0x10) mount$9p_rdma(&(0x7f0000000100), &(0x7f00000003c0)='./file0\x00', &(0x7f00000005c0), 0x1000000, &(0x7f0000000a80)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e20,timeout=0xfffffffffffff359,rq=0x0000000000000fff,cache=none,sq=0x000000000000099e,rq=0x0000000000000001,rq=0x0000000000000800,timeout=0x0000000000000017,sq=0x0000000000000007,sq=0x0000000000000000,rq=0x0000000000000005,hash,uid=', @ANYRESDEC=0xee00, @ANYBLOB=',dont_a=:,uid<\x00'/30, @ANYRESDEC=0x0, @ANYBLOB=',context=staff_u,permit_directio,dont_measure,\x00']) [ 387.528777][ T3737] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 387.768317][ T3737] usb 8-1: Using ep0 maxpacket: 32 [ 387.888028][ T3737] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 387.896620][ T3737] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 387.908074][ T3737] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 387.915923][ T3737] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping 00:45:57 executing program 1: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) open(0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000300)=""/198, 0xc6) 00:45:57 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, 0x0, 0x0) [ 388.079738][ T6164] loop1: detected capacity change from 0 to 264192 [ 388.086611][ T6164] erofs: (device loop1): mounted with root inode @ nid 36. [ 388.088105][ T3737] usb 8-1: New USB device found, idVendor=0403, idProduct=df32, bcdDevice=33.9b [ 388.099416][ T3737] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.105836][ T3737] usb 8-1: Product: syz [ 388.109042][ T3737] usb 8-1: Manufacturer: syz [ 388.112533][ T3737] usb 8-1: SerialNumber: syz 00:45:57 executing program 1: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="e2e1f5e06fba1d88030000000c0024000700000000000000e80300000000000000000000020000000000000000000000fc4f50b963674e1c88d99f66ca7a77a10000000000000000000000000000000001000000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000c04100007400000000000000ffffffff0000000080761000535f0100e8030000000000000000000003000000000000000000000000000000000000002400000000000000540002002400000000000000550002002a00000000000000570001003000000000000000600002005b00000000000000650001005f000000000000006a0001005f000000000000006f0001002e2e2e66696c652e636f6c6466696c653066696c653166696c653266696c653300000000000000000000000005000000ed8100006400000000000000ffffffff0100000080761000535f0100e80300000000000000000000010000000000000000000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c6572730000000000000000000000000000000000000000000000000000000005000000ed4100003d00000000000000ffffffff0200000080761000535f0100e8030000000000000000000002000000000000000000000000000000000000003000000000000000300002002400000000000000310002003400000000000000330001005700000000000000380007002e2e2e66696c653066696c653100000005000000ed8100001a04000000000000ffffffff0300000080761000535f0100e80300000000000000000000010000000000000000000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c00000000000005000000ffa100002700000000000000ffffffff0400000080761000535f0100e8030000000000000000000001000000000000000000000000000000000000002f746d702f73797a2d696d61676567656e323830373731343739322f66696c65302f66696c65300000000000000000000000000000000000000000000000000005000900ed8100000a00000000000000ffffffff0500000080761000535f0100e803000000000000000000000100000000000000000000000000000000000000000000000000000000000000060106007861747472317861747472310601060078617474723278617474723273797a6b616c6c6572730000000000000000000007000000ed8100002823000000000000010000000600000080761000535f0100e80300000000000000000000020000000000000000000000000000000000000000000000010000000010012000000000280300000100"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) open(0x0, 0x0, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000300)=""/198, 0xc6) [ 388.128843][ T3737] usb 8-1: config 0 descriptor?? [ 388.151920][ T6168] loop1: detected capacity change from 0 to 264192 [ 388.159478][ T6168] erofs: (device loop1): mounted with root inode @ nid 36. [ 388.174283][ T3737] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 388.185420][ T3737] ftdi_sio ttyUSB0: unknown device type: 0x339b 00:45:57 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 388.373416][ T3732] usb 8-1: USB disconnect, device number 2 [ 388.380733][ T3732] ftdi_sio 8-1:0.0: device disconnected 00:45:58 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r0) 00:45:58 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000d80)='ceph\x00', &(0x7f0000000dc0)={'syz', 0x3}, 0xfffffffffffffffa) 00:45:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:58 executing program 3: open(&(0x7f0000000000)='./file0\x00', 0x90e43, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:45:58 executing program 1: sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0xc068c3d9a91d435e) 00:45:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, 0x0, 0x0) 00:45:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:58 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x204000, 0x0) 00:45:58 executing program 1: syz_emit_ethernet(0xa6, &(0x7f0000001440)=ANY=[], 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 00:45:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:58 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x12b, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002020000102505a1a440000102030109021901010106b020090400"], &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) 00:45:58 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x20001, 0x0) write$P9_RREADDIR(r0, 0x0, 0xa6) 00:45:58 executing program 0: getresgid(0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) [ 389.357739][ T23] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 389.607682][ T23] usb 8-1: Using ep0 maxpacket: 16 00:45:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5e}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:45:59 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1}) r2 = syz_io_uring_setup(0x5d8, &(0x7f0000000340), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r2, 0x450e, 0x0, 0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000180)={0x1}) r6 = dup(r0) write$6lowpan_enable(r6, 0x0, 0x0) 00:45:59 executing program 0: epoll_wait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) [ 389.857795][ T23] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 00:45:59 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x78}}, 0x0) [ 389.893793][ T38] audit: type=1400 audit(1667177159.084:204): avc: denied { create } for pid=6206 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 00:45:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) [ 389.907750][ T38] audit: type=1400 audit(1667177159.084:205): avc: denied { write } for pid=6206 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 390.057974][ T23] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.067407][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.074313][ T23] usb 8-1: Product: syz [ 390.079896][ T23] usb 8-1: Manufacturer: syz [ 390.084401][ T23] usb 8-1: SerialNumber: syz [ 390.365949][ T23] usb 8-1: USB disconnect, device number 3 00:46:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000001000), 0x4) 00:46:00 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x44000000, &(0x7f0000001480)="12cf47b06b92d39767ee4a6c0fa81a040aa355a2809a1eabc958af1dd17ccb33513a59", 0x23, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff35f85f863815a43c99711") 00:46:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03"], 0x4) 00:46:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 390.857069][ T38] audit: type=1400 audit(1667177160.044:206): avc: denied { setopt } for pid=6214 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 390.878264][ C2] hpet: Lost 1 RTC interrupts 00:46:00 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) 00:46:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x4}, 0x1c}}, 0x0) 00:46:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x4, &(0x7f0000001580)=@framed={{}, [@jmp={0x5, 0x0, 0xa}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x4, &(0x7f0000001580)=@framed={{}, [@jmp={0x5, 0x0, 0x5}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 00:46:00 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x44000000, &(0x7f0000001480)="12cf47b06b92d39767ee4a6c0fa81a040aa355a2809a1eabc958af1dd17ccb33513a59", 0x23, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff35f85f863815a43c99711") 00:46:00 executing program 1: syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x40c1) 00:46:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:00 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x12b, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) 00:46:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x0, 0x0, 0x0, 0x104, 0x1}, 0x48) 00:46:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)='?', 0x1}], 0x1, &(0x7f00000002c0)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0) 00:46:00 executing program 2: r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) r1 = getpid() process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x12) 00:46:00 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x7ffffffff000) [ 391.055983][ T38] audit: type=1400 audit(1667177160.244:207): avc: denied { getopt } for pid=6246 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 00:46:00 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x44000000, &(0x7f0000001480)="12cf47b06b92d39767ee4a6c0fa81a040aa355a2809a1eabc958af1dd17ccb33513a59", 0x23, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff35f85f863815a43c99711") 00:46:00 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:00 executing program 2: syz_clone(0x8201000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 391.288407][ T3737] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 391.527869][ T3737] usb 8-1: Using ep0 maxpacket: 16 [ 391.727859][ T3737] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.735274][ T3737] usb 8-1: config 1 interface 0 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 391.744866][ T3737] usb 8-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.754724][ T3737] usb 8-1: config 1 interface 0 has no altsetting 0 [ 391.918951][ T3737] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.929051][ T3737] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.939351][ T3737] usb 8-1: Product: syz [ 391.945483][ T3737] usb 8-1: Manufacturer: syz [ 391.949358][ T3737] usb 8-1: SerialNumber: syz [ 392.087858][ T3712] Bluetooth: hci0: command 0x0406 tx timeout [ 392.088221][ T3711] Bluetooth: hci1: command 0x0406 tx timeout [ 392.310924][ T3737] usb 8-1: USB disconnect, device number 4 00:46:01 executing program 3: socketpair(0x5, 0x0, 0x0, &(0x7f0000000a80)) 00:46:01 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @dev}, 0x4}}, 0x2e) 00:46:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000011c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000001200)=[@mark={{0x14}}, @timestamping={{0x14}}], 0x30}}], 0x1, 0x0) 00:46:01 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x44000000, &(0x7f0000001480)="12cf47b06b92d39767ee4a6c0fa81a040aa355a2809a1eabc958af1dd17ccb33513a59", 0x23, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff35f85f863815a43c99711") 00:46:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)='?', 0x1}], 0x1}}], 0x1, 0x0) 00:46:01 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 392.731235][ T38] audit: type=1400 audit(1667177161.924:208): avc: denied { create } for pid=6265 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 00:46:01 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000180)={0x1120, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x10, 0x1, "80fd5bbcef3ac92f359a4fb1"}, @INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "3f3f9edd6ccf20bf3ca00b706dc644daa58d5d98dc66ea724698331f6b5a6fb8d7976715546e43e9a7c7a5c7dbb4d11dd832f74b74f165523f0c76d0cb3da1ee15786dcd6c2e61405a51487c1cd26b04783916115d958c4b9cd11a2dee84f0318c3987dc81d213825c923fe568ee7bddfbdb0f89a50173fee5d6f8adc0eb58a8f6be9d5d6b03be702bcbac2ceee353aee404bfb3bf9cf16a7fd00cd00f609c0a4b1e4a3e30a248a0bfe695cbd95c8107d6be0d7d5819f154c66e33"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1120}, 0x1, 0x0, 0x0, 0x20000804}, 0x800) 00:46:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4015) 00:46:02 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000180)={0xe84, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "80fd5bbcef3ac92f35"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "3f3f9edd6ccf20bf3ca00b706dc644daa58d5d98dc66ea724698331f6b5a6fb8d7976715546e43e9a7c7a5c7dbb4d11dd832f74b74f165523f0c76d0cb3da1ee15786dcd6c2e61405a51487c1cd26b04783916115d958c4b9cd11a2dee84f0318c3987dc81d213825c923fe568ee7bddfbdb0f89a50173fee5d6f8adc0eb58a8f6be9d5d6b03be702bcbac2ceee353aee404bfb3bf9cf16a7fd00cd00f609c0a4b1e4a3e30a248a0bfe695cbd95c8107d6be0d7d5819f154c6"}, @INET_DIAG_REQ_BYTECODE={0xd65, 0x1, "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"}]}, 0xe84}}, 0x0) 00:46:02 executing program 1: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x8c140, 0x0) 00:46:02 executing program 2: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) syncfs(r0) [ 392.837407][ T6281] loop2: detected capacity change from 0 to 264192 [ 392.839546][ T38] audit: type=1800 audit(1667177162.034:209): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1159 res=0 errno=0 [ 392.858559][ T6281] erofs: (device loop2): mounted with root inode @ nid 36. 00:46:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x3, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:02 executing program 1: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x4}, &(0x7f0000000080)={0x5}, &(0x7f00000000c0)) 00:46:02 executing program 0: io_setup(0x4231, &(0x7f00000003c0)) 00:46:02 executing program 2: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) syncfs(r0) 00:46:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={0x0, @l2tp={0x2, 0x0, @loopback}, @generic={0x0, "0712f32663441707366bcc99f112"}, @l2tp={0x2, 0x0, @empty}}) 00:46:02 executing program 3: io_setup(0x0, &(0x7f0000000980)) mlockall(0x7) [ 392.934402][ T6296] loop2: detected capacity change from 0 to 264192 00:46:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 392.943550][ T6296] erofs: (device loop2): mounted with root inode @ nid 36. 00:46:02 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 00:46:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000740)="c2", 0x1}, {&(0x7f0000000800)='#', 0x1}], 0x3}}], 0x1, 0x0) 00:46:02 executing program 2: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) syncfs(r0) [ 392.985002][ T6302] loop2: detected capacity change from 0 to 264192 [ 392.992354][ T6302] erofs: (device loop2): mounted with root inode @ nid 36. 00:46:02 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000180)={0xe84, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "3f3f9edd6ccf20bf3ca00b706dc644daa58d5d98dc66ea724698331f6b5a6fb8d7976715546e43e9a7c7a5c7dbb4d11dd832f74b74f165523f0c76d0cb3da1ee15786dcd6c2e61405a51487c1cd26b04783916115d958c4b9cd11a2dee84f0318c3987dc81d213825c923fe568ee7bddfbdb0f89a50173fee5d6f8adc0eb58a8f6be9d5d6b03be702bcbac2ceee353aee404bfb3bf9cf16a7fd00cd00f609c0a4b1e4a3e30a248a0bfe695cbd95c8107d6be0d7d5819f154c6"}, @INET_DIAG_REQ_BYTECODE={0xd75, 0x1, "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"}]}, 0xe84}}, 0x0) 00:46:02 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x204000, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, 0x0, 0x0) 00:46:02 executing program 1: openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200000, 0x0) 00:46:02 executing program 2: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) syncfs(r0) 00:46:02 executing program 1: lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) 00:46:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x8, 0x3, &(0x7f0000001580)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:02 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000700)=@raw=[@map_fd, @map_val], &(0x7f0000000740)='GPL\x00', 0x0, 0x3d, &(0x7f0000000780)=""/61, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x0, 0x0, 0x0, 0x470}, 0x48) 00:46:02 executing program 3: io_setup(0x4, &(0x7f0000000000)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 00:46:02 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x15) [ 393.063778][ T6320] loop2: detected capacity change from 0 to 264192 00:46:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x8, 0x3, &(0x7f0000001580)=@framed={{}, [], {0x95, 0x74}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 393.079550][ T6320] erofs: (device loop2): mounted with root inode @ nid 36. [ 393.082923][ T38] audit: type=1400 audit(1667177162.274:210): avc: denied { create } for pid=6323 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 00:46:02 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f00000003c0)) 00:46:02 executing program 2: syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) 00:46:02 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) connect$nfc_llcp(r0, 0x0, 0x0) 00:46:02 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x12b, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002020000102505a1a440000102030109021901010106b0200904000402"], &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) [ 393.109135][ T38] audit: type=1400 audit(1667177162.304:211): avc: denied { create } for pid=6327 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 00:46:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0xc}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1004, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:46:02 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 00:46:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:02 executing program 3: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040), 0x8) 00:46:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000740)="c2", 0x1}], 0x1}}], 0x1, 0x0) 00:46:02 executing program 2: keyctl$KEYCTL_WATCH_KEY(0x7, 0x0, 0xffffffffffffffff, 0x0) [ 393.397780][ T3735] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 393.637799][ T3735] usb 6-1: Using ep0 maxpacket: 16 [ 393.838023][ T3735] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.845985][ T3735] usb 6-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 393.856471][ T3735] usb 6-1: config 1 interface 0 has no altsetting 0 [ 394.047797][ T3735] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 394.053482][ T3735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.061390][ T3735] usb 6-1: Product: syz [ 394.064912][ T3735] usb 6-1: Manufacturer: syz [ 394.068482][ T3735] usb 6-1: SerialNumber: syz [ 394.350855][ T3735] usb 6-1: USB disconnect, device number 2 00:46:04 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x12b, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002020000102505a1a440000102030109021901010106b0200904000402"], &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) 00:46:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x57}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:04 executing program 3: syz_clone(0x44000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff3") syz_clone3(&(0x7f0000001800)={0x0, 0x0, 0x0, &(0x7f0000001600), {0x32}, &(0x7f0000001640)=""/174, 0xae, &(0x7f0000001700)=""/163, 0x0}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:46:04 executing program 2: open(&(0x7f0000000040)='./file0\x00', 0x101c0, 0x0) 00:46:04 executing program 0: mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)) 00:46:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x4, &(0x7f0000001580)=@framed={{}, [@jmp]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 395.117792][ T173] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 395.358180][ T173] usb 6-1: Using ep0 maxpacket: 16 [ 395.567854][ T173] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.580159][ T173] usb 6-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.590764][ T173] usb 6-1: config 1 interface 0 has no altsetting 0 [ 395.748715][ T173] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.754145][ T173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.760612][ T173] usb 6-1: Product: syz [ 395.766172][ T173] usb 6-1: Manufacturer: syz [ 395.771273][ T173] usb 6-1: SerialNumber: syz [ 396.073933][ T173] usb 6-1: USB disconnect, device number 3 00:46:05 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x12b, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002020000102505a1a440000102030109021901010106b0200904000402"], &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) 00:46:05 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x59}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x800) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8937, &(0x7f0000000140)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x4, &(0x7f0000001580)=@framed={{}, [@jmp]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1004, 0x1}, 0x48) 00:46:05 executing program 2: mknod(&(0x7f0000000100)='./file0\x00', 0x1000, 0x0) 00:46:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:05 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x12b, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) [ 396.847756][ T173] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 396.855811][ T3776] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 397.088010][ T173] usb 6-1: Using ep0 maxpacket: 16 [ 397.108252][ T3776] usb 5-1: Using ep0 maxpacket: 16 [ 397.207794][ T3711] Bluetooth: hci2: command 0x0406 tx timeout [ 397.212655][ T3711] Bluetooth: hci3: command 0x0406 tx timeout [ 397.283765][ T3776] usb 5-1: unable to get BOS descriptor or descriptor too short [ 397.307797][ T173] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.317227][ T173] usb 6-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 397.329581][ T173] usb 6-1: config 1 interface 0 has no altsetting 0 [ 397.389281][ T3776] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.396938][ T3776] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.411618][ T3776] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.424137][ T3776] usb 5-1: config 1 interface 0 has no altsetting 0 [ 397.498951][ T173] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.506376][ T173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.512150][ T173] usb 6-1: Product: syz [ 397.516135][ T173] usb 6-1: Manufacturer: syz [ 397.520659][ T173] usb 6-1: SerialNumber: syz [ 397.629182][ T3776] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 397.636960][ T3776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.649550][ T3776] usb 5-1: Product: syz [ 397.653218][ T3776] usb 5-1: Manufacturer: syz [ 397.658720][ T3776] usb 5-1: SerialNumber: syz [ 397.811351][ T173] usb 6-1: USB disconnect, device number 4 [ 397.992211][ T3776] usb 5-1: USB disconnect, device number 2 00:46:07 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x12b, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002020000102505a1a440000102030109021901010106b0200904000402"], &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) 00:46:07 executing program 2: request_key(&(0x7f0000000000)='id_resolver\x00', 0x0, 0x0, 0xffffffffffffffff) 00:46:07 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="b0000000"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x800) 00:46:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) [ 398.312902][ T6388] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6388 comm=syz-executor.3 00:46:07 executing program 3: syz_clone3(0x0, 0x0) syz_clone(0x44000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)) 00:46:07 executing program 2: fsopen(&(0x7f0000000080)='fusectl\x00', 0x0) 00:46:07 executing program 2: clock_gettime(0x3, &(0x7f0000000440)) 00:46:07 executing program 2: syz_clone(0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000540), &(0x7f0000000b80)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 398.578123][ T3735] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 398.817843][ T3735] usb 6-1: Using ep0 maxpacket: 16 [ 399.017849][ T3735] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.023686][ T3735] usb 6-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 399.034679][ T3735] usb 6-1: config 1 interface 0 has no altsetting 0 [ 399.197847][ T3735] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 399.205771][ T3735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.211859][ T3735] usb 6-1: Product: syz [ 399.215884][ T3735] usb 6-1: Manufacturer: syz [ 399.220446][ T3735] usb 6-1: SerialNumber: syz [ 399.495188][ T3735] usb 6-1: USB disconnect, device number 5 00:46:09 executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) 00:46:09 executing program 3: socketpair(0x11, 0xa, 0x1ff, &(0x7f0000000380)) 00:46:09 executing program 2: syz_clone(0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000540), &(0x7f0000000b80)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {0x0}, {&(0x7f0000000800)='#', 0x1}], 0x3}}], 0x1, 0x0) 00:46:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:09 executing program 1: keyctl$KEYCTL_WATCH_KEY(0x13, 0x0, 0xffffffffffffffff, 0x0) 00:46:09 executing program 2: syz_clone(0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000540), &(0x7f0000000b80)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x14}, 0x14}}, 0x0) 00:46:09 executing program 0: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 00:46:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 00:46:09 executing program 3: mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)) 00:46:09 executing program 2: syz_clone(0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000540), &(0x7f0000000b80)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:09 executing program 3: io_setup(0x4, &(0x7f0000000000)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1ff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 00:46:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 00:46:09 executing program 1: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0xfffffffffffffffa]}, 0x8) 00:46:09 executing program 0: r0 = add_key$keyring(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000d00), &(0x7f0000000d40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000300)='keyring\x00', &(0x7f0000000dc0)={'syz', 0x3}, 0x0) 00:46:09 executing program 1: syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000100)='./file0\x00', 0x80fffff, 0x1, &(0x7f0000000200)=[{&(0x7f0000001440)="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"/2113, 0x841, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:46:09 executing program 0: r0 = gettid() process_vm_readv(r0, &(0x7f0000000440)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000240)=""/38, 0x26}], 0x2, 0x0) [ 400.130506][ T6445] loop1: detected capacity change from 0 to 264191 [ 400.140924][ T6445] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x47094f9c, 0x881dba6f expected 00:46:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5e000000}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:09 executing program 3: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) memfd_create(&(0x7f0000000300)='!!{\x00', 0x0) 00:46:09 executing program 0: io_setup(0x3, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) io_destroy(r0) 00:46:09 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) 00:46:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:09 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x115000, 0x0) 00:46:09 executing program 3: request_key(&(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) 00:46:09 executing program 1: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000240)) 00:46:09 executing program 2: stat(&(0x7f00000062c0)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000004240)='./file0\x00', 0x0, 0x0, 0x0) 00:46:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 400.223857][ T6463] loop1: detected capacity change from 0 to 264192 [ 400.233595][ T6463] erofs: (device loop1): mounted with root inode @ nid 36. [ 400.245294][ T38] audit: type=1400 audit(1667177169.434:212): avc: denied { getattr } for pid=6462 comm="syz-executor.1" name="/" dev="loop1" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 00:46:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 00:46:09 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x284400, 0x0) 00:46:09 executing program 3: keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 00:46:09 executing program 1: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000240)) 00:46:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c2001, 0x0) write$tun(r0, 0x0, 0x0) 00:46:09 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="01"], 0xd8}}, 0x0) 00:46:09 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000740)) [ 400.320333][ T6477] loop1: detected capacity change from 0 to 264192 [ 400.328111][ T6477] erofs: (device loop1): mounted with root inode @ nid 36. 00:46:09 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) 00:46:09 executing program 0: syz_clone(0x44000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:09 executing program 1: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000240)) 00:46:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xff000000}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:09 executing program 2: setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x4231, &(0x7f00000003c0)) 00:46:09 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x80083, 0x0) [ 400.404945][ T6492] loop1: detected capacity change from 0 to 264192 00:46:09 executing program 3: io_setup(0x3, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0xffff, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) [ 400.414158][ T6492] erofs: (device loop1): mounted with root inode @ nid 36. 00:46:09 executing program 1: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000240)) 00:46:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x405}, 0x14}}, 0x0) 00:46:09 executing program 2: setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x4231, &(0x7f00000003c0)) 00:46:09 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 00:46:09 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:46:09 executing program 0: setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000480)="13", 0x1, 0x0) io_setup(0x0, &(0x7f00000003c0)) 00:46:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="c2", 0x1}, {&(0x7f0000000800)='#', 0x1}], 0x2}}], 0x1, 0x0) 00:46:09 executing program 0: keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '&'}, 0x2c, 0xffffffffffffffff) 00:46:09 executing program 2: setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x4231, &(0x7f00000003c0)) 00:46:09 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@union={0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001580)=""/212, 0x28, 0xd4, 0x1}, 0x20) 00:46:09 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:09 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 00:46:09 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x12b, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002020000102505a1a44000010203010902"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 00:46:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0) 00:46:09 executing program 3: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x4}, 0x0, &(0x7f00000000c0)) 00:46:09 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x4, &(0x7f0000001580)=@framed={{}, [@jmp={0x5, 0x0, 0xb}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:09 executing program 2: setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x4231, &(0x7f00000003c0)) 00:46:09 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x2, &(0x7f0000000700)=@raw=[@map_val], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:09 executing program 0: syz_clone3(&(0x7f0000001400)={0x80102000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240), {0x3b}, 0x0, 0x0, &(0x7f0000001300)=""/168, 0x0}, 0x58) syz_clone(0x44000000, 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)) syz_genetlink_get_family_id$nbd(&(0x7f00000019c0), 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$userns(r0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4004800) syz_clone3(&(0x7f0000001800)={0x0, 0x0, 0x0, &(0x7f0000001600), {0x32}, 0x0, 0x0, &(0x7f0000001700)=""/163, 0x0}, 0x58) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x4000040) 00:46:09 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x0) [ 400.907996][ T3785] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 401.157709][ T3785] usb 6-1: Using ep0 maxpacket: 16 [ 401.329455][ T3785] usb 6-1: unable to get BOS descriptor or descriptor too short [ 401.407959][ T3785] usb 6-1: config 0 has no interfaces? [ 401.608085][ T3785] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.614316][ T3785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.621596][ T3785] usb 6-1: Product: syz [ 401.625497][ T3785] usb 6-1: Manufacturer: syz [ 401.629893][ T3785] usb 6-1: SerialNumber: syz [ 401.636027][ T3785] usb 6-1: config 0 descriptor?? [ 401.883755][ T176] usb 6-1: USB disconnect, device number 6 00:46:11 executing program 1: add_key(&(0x7f00000008c0)='logon\x00', 0x0, &(0x7f0000000940)="d4", 0x1, 0xfffffffffffffff9) 00:46:11 executing program 3: keyctl$KEYCTL_WATCH_KEY(0x14, 0x0, 0xffffffffffffffff, 0x0) 00:46:11 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x42}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:11 executing program 2: syz_clone3(&(0x7f0000001400)={0x80102000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240), {0x3b}, 0x0, 0x0, &(0x7f0000001300)=""/168, 0x0}, 0x58) syz_clone(0x44000000, 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff3") r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000019c0), 0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$userns(r1, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB='P', @ANYRES16=r0, @ANYBLOB="100027bd7000fcdbdf25050000000c000800090000000000000016000a002e2f6367726f75702e6e65742f73796a8ba931000c00030000000000000000000c000300f9ff000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4004800) syz_clone3(&(0x7f0000001800)={0x0, 0x0, 0x0, &(0x7f0000001600), {0x32}, &(0x7f0000001640)=""/174, 0xae, &(0x7f0000001700)=""/163, 0x0}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b40)={0x1c0, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x696e831a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f7573d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14886277}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e63a2ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3154f084}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bd4f917}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x417d0d63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d741fd8}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bbbd09a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ee4e131}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4260489}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73da9c8a}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67a0f0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b9c4cab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e3968b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23f077a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1beb9da8}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x48080}, 0x4000040) 00:46:11 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r0, @ANYBLOB="010025bd7000fcdbdf250d"], 0xd8}}, 0x0) 00:46:11 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x12b, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 00:46:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) 00:46:11 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg(r0, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0) [ 402.442558][ T38] audit: type=1400 audit(1667177171.634:213): avc: denied { read } for pid=6560 comm="syz-executor.0" name="uinput" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 00:46:11 executing program 0: mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 00:46:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) 00:46:11 executing program 0: io_setup(0xffffff81, &(0x7f0000000000)) [ 402.472461][ T38] audit: type=1400 audit(1667177171.634:214): avc: denied { open } for pid=6560 comm="syz-executor.0" path="/dev/uinput" dev="devtmpfs" ino=864 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 402.481671][ T6570] Zero length message leads to an empty skb 00:46:11 executing program 2: syz_clone(0x44000000, 0x0, 0x0, &(0x7f00000014c0), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(0x0, &(0x7f0000000b40)) [ 402.495585][ T38] audit: type=1400 audit(1667177171.634:215): avc: denied { ioctl } for pid=6560 comm="syz-executor.0" path="/dev/uinput" dev="devtmpfs" ino=864 ioctlcmd=0x55c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 00:46:11 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000010c0)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0}, 0x20) [ 402.697840][ T3733] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 402.947748][ T3733] usb 8-1: Using ep0 maxpacket: 16 [ 403.107759][ T3733] usb 8-1: unable to get BOS descriptor or descriptor too short [ 403.187928][ T3733] usb 8-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 64 [ 403.195206][ T3733] usb 8-1: config 1 interface 0 has no altsetting 0 [ 403.357843][ T3733] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.363886][ T3733] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.371418][ T3733] usb 8-1: Product: syz [ 403.374957][ T3733] usb 8-1: Manufacturer: syz [ 403.379286][ T3733] usb 8-1: SerialNumber: syz [ 403.398182][ T6558] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 403.700911][ T3733] usb 8-1: USB disconnect, device number 5 00:46:13 executing program 3: fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) 00:46:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:13 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)={0x0, "db799d8c4abd6b0452f09cd7c8be70f804b2761865b469a21dae7b94e8b7c6039b63cd65531efccd1a6beee6f6d77a58e954e3639320124ebf05e061acc47db6"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r0, 0xffffffffffffffff) 00:46:13 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000180)=@framed={{}, [@exit, @map_fd, @initr0, @call, @map_idx_val, @map_val]}, &(0x7f0000000200)='syzkaller\x00', 0x6a49, 0x93, &(0x7f0000000240)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:13 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x313000, 0x0) 00:46:13 executing program 0: socketpair(0x8, 0x0, 0x0, &(0x7f0000000a00)) 00:46:13 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x313000, 0x0) 00:46:13 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000013c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001380)={&(0x7f0000000180)={0x4c}, 0x4c}}, 0x0) 00:46:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x8, 0x3, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x500}}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 404.179926][ T38] audit: type=1400 audit(1667177173.374:216): avc: denied { create } for pid=6591 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 00:46:13 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x12b, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000240)=@lang_id={0x4}}]}) 00:46:13 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x313000, 0x0) 00:46:13 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x313000, 0x0) 00:46:13 executing program 2: syz_clone(0x12010600, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:13 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r0}, &(0x7f0000000b40)) syz_clone3(&(0x7f0000001400)={0x80102000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240), {0x3b}, &(0x7f0000001280)=""/117, 0x75, &(0x7f0000001300)=""/168, &(0x7f00000013c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) syz_clone(0x44000000, &(0x7f0000001480)="12cf47b06b92d39767ee4a6c0fa81a040aa355a2809a1eabc958af1dd17ccb33513a59", 0x23, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff35f85f863815a43c99711") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r1}, &(0x7f0000000b40)) syz_open_procfs$userns(r1, &(0x7f0000001dc0)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="100027bd7000fcdbdf25050000000c000800090000000000000016000a002e2f6367726f75702e6e65742f73796a8ba931000c00030000000000000000000c000300f9ff000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4004800) syz_clone3(&(0x7f0000001800)={0x10108080, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), {0x32}, &(0x7f0000001640)=""/174, 0xae, &(0x7f0000001700)=""/163, &(0x7f00000017c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b40)={0x1d0, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x696e831a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f7573d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14886277}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e63a2ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3154f084}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bd4f917}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x417d0d63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d741fd8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bbbd09a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ee4e131}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22f17816}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4260489}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73da9c8a}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67a0f0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b9c4cab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e3968b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23f077a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1beb9da8}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x48080}, 0x4000040) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:13 executing program 2: execve(&(0x7f0000000640)='./file0\x00', 0x0, 0x0) [ 404.253895][ T6611] process 'syz-executor.2' launched './file0' with NULL argv: empty string added 00:46:13 executing program 3: socketpair(0x1e, 0x0, 0x200, &(0x7f0000000000)) 00:46:13 executing program 2: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x150) [ 404.286632][ T6615] loop2: detected capacity change from 0 to 264192 [ 404.296185][ T6615] erofs: (device loop2): mounted with root inode @ nid 36. [ 404.477857][ T3733] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 404.718487][ T3733] usb 5-1: Using ep0 maxpacket: 16 [ 404.898032][ T3733] usb 5-1: unable to get BOS descriptor or descriptor too short [ 404.977900][ T3733] usb 5-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 64 [ 404.985296][ T3733] usb 5-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 404.998838][ T3733] usb 5-1: config 1 interface 0 has no altsetting 0 [ 405.001454][ T38] audit: type=1400 audit(1667177174.194:217): avc: denied { rename } for pid=3111 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 405.027406][ T38] audit: type=1400 audit(1667177174.194:218): avc: denied { unlink } for pid=3111 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 405.045413][ T38] audit: type=1400 audit(1667177174.194:219): avc: denied { create } for pid=3111 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 405.248019][ T3733] usb 5-1: string descriptor 0 read error: -22 [ 405.252704][ T3733] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.261756][ T3733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.291756][ T6602] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 405.298897][ T6602] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 405.510329][ T3674] usb 5-1: USB disconnect, device number 3 00:46:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x18, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x18}}, 0x0) 00:46:15 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="b0"], 0xb0}}, 0x0) 00:46:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r0}, &(0x7f0000000b40)) syz_clone3(&(0x7f0000001400)={0x80102000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240), {0x3b}, &(0x7f0000001280)=""/117, 0x75, &(0x7f0000001300)=""/168, &(0x7f00000013c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) syz_clone(0x44000000, &(0x7f0000001480)="12cf47b06b92d39767ee4a6c0fa81a040aa355a2809a1eabc958af1dd17ccb33513a59", 0x23, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff35f85f863815a43c99711") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r1}, &(0x7f0000000b40)) syz_open_procfs$userns(r1, &(0x7f0000001dc0)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="100027bd7000fcdbdf25050000000c000800090000000000000016000a002e2f6367726f75702e6e65742f73796a8ba931000c00030000000000000000000c000300f9ff000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4004800) syz_clone3(&(0x7f0000001800)={0x10108080, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), {0x32}, &(0x7f0000001640)=""/174, 0xae, &(0x7f0000001700)=""/163, &(0x7f00000017c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b40)={0x1d0, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x696e831a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f7573d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14886277}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e63a2ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3154f084}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bd4f917}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x417d0d63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d741fd8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bbbd09a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ee4e131}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22f17816}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4260489}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73da9c8a}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67a0f0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b9c4cab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e3968b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23f077a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1beb9da8}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x48080}, 0x4000040) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r0}, &(0x7f0000000b40)) syz_clone3(&(0x7f0000001400)={0x80102000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240), {0x3b}, &(0x7f0000001280)=""/117, 0x75, &(0x7f0000001300)=""/168, &(0x7f00000013c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) syz_clone(0x44000000, &(0x7f0000001480)="12cf47b06b92d39767ee4a6c0fa81a040aa355a2809a1eabc958af1dd17ccb33513a59", 0x23, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff35f85f863815a43c99711") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r1}, &(0x7f0000000b40)) syz_open_procfs$userns(r1, &(0x7f0000001dc0)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="100027bd7000fcdbdf25050000000c000800090000000000000016000a002e2f6367726f75702e6e65742f73796a8ba931000c00030000000000000000000c000300f9ff000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4004800) syz_clone3(&(0x7f0000001800)={0x10108080, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), {0x32}, &(0x7f0000001640)=""/174, 0xae, &(0x7f0000001700)=""/163, &(0x7f00000017c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b40)={0x1d0, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x696e831a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f7573d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14886277}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e63a2ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3154f084}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bd4f917}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x417d0d63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d741fd8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bbbd09a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ee4e131}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22f17816}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4260489}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73da9c8a}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67a0f0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b9c4cab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e3968b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23f077a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1beb9da8}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x48080}, 0x4000040) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 406.030257][ T6622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6622 comm=syz-executor.2 00:46:15 executing program 2: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000c00)="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"/2112, 0x840, 0x400}], 0x10010, &(0x7f0000000b40)=ANY=[], 0x1) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/198, 0xc6) 00:46:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x5, &(0x7f0000000480)=0x0) io_submit(r1, 0x3, &(0x7f0000001a00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x0, 0x0]) [ 406.074138][ T6631] loop2: detected capacity change from 0 to 264192 [ 406.082215][ T6631] erofs: (device loop2): mounted with root inode @ nid 36. 00:46:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, &(0x7f0000000140)) 00:46:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:15 executing program 2: add_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$assume_authority(0x10, 0x0) 00:46:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x2}]}, {0x0, [0x0, 0x61, 0x5f, 0x30]}}, &(0x7f0000001580)=""/212, 0x2a, 0xd4, 0x1}, 0x20) 00:46:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r0}, &(0x7f0000000b40)) syz_clone3(&(0x7f0000001400)={0x80102000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240), {0x3b}, &(0x7f0000001280)=""/117, 0x75, &(0x7f0000001300)=""/168, &(0x7f00000013c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) syz_clone(0x44000000, &(0x7f0000001480)="12cf47b06b92d39767ee4a6c0fa81a040aa355a2809a1eabc958af1dd17ccb33513a59", 0x23, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff35f85f863815a43c99711") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r1}, &(0x7f0000000b40)) syz_open_procfs$userns(r1, &(0x7f0000001dc0)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="100027bd7000fcdbdf25050000000c000800090000000000000016000a002e2f6367726f75702e6e65742f73796a8ba931000c00030000000000000000000c000300f9ff000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4004800) syz_clone3(&(0x7f0000001800)={0x10108080, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), {0x32}, &(0x7f0000001640)=""/174, 0xae, &(0x7f0000001700)=""/163, &(0x7f00000017c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b40)={0x1d0, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x696e831a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f7573d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14886277}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e63a2ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3154f084}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bd4f917}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x417d0d63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d741fd8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bbbd09a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ee4e131}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22f17816}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4260489}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73da9c8a}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67a0f0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b9c4cab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e3968b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23f077a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1beb9da8}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x48080}, 0x4000040) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x2, &(0x7f0000000040)=@raw=[@exit, @generic={0x1}], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xc, 0x3}]}, &(0x7f00000002c0)='GPL\x00', 0x1, 0xffe, &(0x7f0000000300)=""/4094, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r0}, &(0x7f0000000b40)) syz_clone3(&(0x7f0000001400)={0x80102000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240), {0x3b}, &(0x7f0000001280)=""/117, 0x75, &(0x7f0000001300)=""/168, &(0x7f00000013c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) syz_clone(0x44000000, &(0x7f0000001480)="12cf47b06b92d39767ee4a6c0fa81a040aa355a2809a1eabc958af1dd17ccb33513a59", 0x23, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff35f85f863815a43c99711") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r1}, &(0x7f0000000b40)) syz_open_procfs$userns(r1, &(0x7f0000001dc0)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="100027bd7000fcdbdf25050000000c000800090000000000000016000a002e2f6367726f75702e6e65742f73796a8ba931000c00030000000000000000000c000300f9ff000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4004800) syz_clone3(&(0x7f0000001800)={0x10108080, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), {0x32}, &(0x7f0000001640)=""/174, 0xae, &(0x7f0000001700)=""/163, &(0x7f00000017c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b40)={0x1d0, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x696e831a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f7573d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14886277}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e63a2ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3154f084}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bd4f917}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x417d0d63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d741fd8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bbbd09a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ee4e131}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22f17816}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4260489}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73da9c8a}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67a0f0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b9c4cab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e3968b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23f077a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1beb9da8}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x48080}, 0x4000040) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:15 executing program 2: syz_clone(0x22080400, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:15 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000180)=@framed={{}, [@exit, @map_fd, @initr0, @map_idx_val, @map_val]}, &(0x7f0000000200)='syzkaller\x00', 0x6a49, 0x93, &(0x7f0000000240)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:15 executing program 2: request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='*\\\'[/{)&/^%.^\x00', 0xfffffffffffffffa) 00:46:15 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) 00:46:15 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r0}, &(0x7f0000000b40)) syz_clone3(&(0x7f0000001400)={0x80102000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240), {0x3b}, &(0x7f0000001280)=""/117, 0x75, &(0x7f0000001300)=""/168, &(0x7f00000013c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) syz_clone(0x44000000, &(0x7f0000001480)="12cf47b06b92d39767ee4a6c0fa81a040aa355a2809a1eabc958af1dd17ccb33513a59", 0x23, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff35f85f863815a43c99711") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r1}, &(0x7f0000000b40)) syz_open_procfs$userns(r1, &(0x7f0000001dc0)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="100027bd7000fcdbdf25050000000c000800090000000000000016000a002e2f6367726f75702e6e65742f73796a8ba931000c00030000000000000000000c000300f9ff000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4004800) syz_clone3(&(0x7f0000001800)={0x10108080, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), {0x32}, &(0x7f0000001640)=""/174, 0xae, &(0x7f0000001700)=""/163, &(0x7f00000017c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b40)={0x1d0, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x696e831a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f7573d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14886277}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e63a2ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3154f084}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bd4f917}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x417d0d63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d741fd8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bbbd09a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ee4e131}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22f17816}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4260489}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73da9c8a}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67a0f0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b9c4cab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e3968b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23f077a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1beb9da8}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x48080}, 0x4000040) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:15 executing program 3: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000140)="05", 0x1, r0) 00:46:15 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write$binfmt_script(r0, 0x0, 0x0) 00:46:15 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), 0xffffffffffffffff) 00:46:15 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r0}, &(0x7f0000000b40)) syz_clone3(&(0x7f0000001400)={0x80102000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240), {0x3b}, &(0x7f0000001280)=""/117, 0x75, &(0x7f0000001300)=""/168, &(0x7f00000013c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) syz_clone(0x44000000, &(0x7f0000001480)="12cf47b06b92d39767ee4a6c0fa81a040aa355a2809a1eabc958af1dd17ccb33513a59", 0x23, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)="44858180c8b098b6321e36fc7cae70fd50c698a181808a8d3f2fe59cdc85b2946183af53a8fe37e80036f5871ff35f85f863815a43c99711") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522, r1}, &(0x7f0000000b40)) syz_open_procfs$userns(r1, &(0x7f0000001dc0)) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="100027bd7000fcdbdf25050000000c000800090000000000000016000a002e2f6367726f75702e6e65742f73796a8ba931000c00030000000000000000000c000300f9ff000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4004800) syz_clone3(&(0x7f0000001800)={0x10108080, &(0x7f0000001580), &(0x7f00000015c0), &(0x7f0000001600), {0x32}, &(0x7f0000001640)=""/174, 0xae, &(0x7f0000001700)=""/163, &(0x7f00000017c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000001d80)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001b40)={0x1d0, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x60, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x696e831a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f7573d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14886277}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e63a2ef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3154f084}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bd4f917}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xec, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x417d0d63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d741fd8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bbbd09a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ee4e131}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22f17816}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4260489}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73da9c8a}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67a0f0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b9c4cab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e3968b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23f077a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1beb9da8}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x48080}, 0x4000040) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:15 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 00:46:15 executing program 3: socket$inet6(0xa, 0x2, 0x567b) 00:46:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:15 executing program 2: request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0) 00:46:15 executing program 3: socket$inet6(0xa, 0x5, 0x101) 00:46:15 executing program 2: renameat(0xffffffffffffffff, &(0x7f0000000e80)='./file0\x00', 0xffffffffffffffff, 0x0) 00:46:15 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4004031, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4004031, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4004031, 0xffffffffffffffff, 0x8000000) 00:46:15 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000180)={0xe84, 0x13, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "80fd5bbcef3ac92f35"}, @INET_DIAG_REQ_BYTECODE={0xe25, 0x1, "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"}]}, 0xe84}, 0x1, 0x0, 0x0, 0x20000804}, 0x800) 00:46:15 executing program 1: clock_getres(0x0, &(0x7f0000000100)) 00:46:15 executing program 0: io_setup(0x5, &(0x7f0000000480)=0x0) io_submit(r0, 0x1, &(0x7f0000001a00)=[0x0]) 00:46:15 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x0) 00:46:15 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x18, 0x4, &(0x7f0000001580)=@framed={{}, [@jmp={0x5, 0x0, 0xd}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:16 executing program 3: removexattr(&(0x7f0000000200)='./file0\x00', 0x0) 00:46:16 executing program 2: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) 00:46:16 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x12b, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) 00:46:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x4}, 0x1c}}, 0x0) 00:46:16 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff) 00:46:16 executing program 0: socketpair(0x6, 0x0, 0x0, &(0x7f00000002c0)) 00:46:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80100001b"], 0x1b8}}, 0x0) 00:46:16 executing program 2: request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) [ 406.906019][ T38] audit: type=1400 audit(1667177176.094:220): avc: denied { create } for pid=6733 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 00:46:16 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/133, 0x85) 00:46:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x5, &(0x7f0000000480)=0x0) io_submit(r1, 0x3, &(0x7f0000001a00)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0]) [ 406.945436][ T38] audit: type=1400 audit(1667177176.114:221): avc: denied { write } for pid=6733 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 406.966445][ T38] audit: type=1400 audit(1667177176.114:222): avc: denied { nlmsg_write } for pid=6733 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 407.087861][ T825] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 407.328201][ T825] usb 6-1: Using ep0 maxpacket: 16 [ 407.577803][ T825] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 64 [ 407.585947][ T825] usb 6-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 407.596390][ T825] usb 6-1: config 1 interface 0 has no altsetting 0 [ 407.759388][ T825] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 407.771059][ T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.778154][ T825] usb 6-1: Product: syz [ 407.781832][ T825] usb 6-1: Manufacturer: syz [ 407.787201][ T825] usb 6-1: SerialNumber: syz [ 407.819014][ T6725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 408.129600][ T825] usb 6-1: USB disconnect, device number 7 00:46:17 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capget(&(0x7f0000000b00)={0x20080522}, &(0x7f0000000b40)) syz_clone3(&(0x7f0000001400)={0x80102000, &(0x7f00000011c0), &(0x7f0000001200), 0x0, {0x3b}, &(0x7f0000001280)=""/117, 0x75, &(0x7f0000001300)=""/168, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x6}, 0x58) syz_clone(0x0, &(0x7f0000001480)="12cf47b06b92d39767ee4a6c0fa81a040aa355a2809a1eabc958af1dd17ccb33513a59", 0x23, &(0x7f00000014c0), &(0x7f0000001500), 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000019c0), 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:17 executing program 1: keyctl$KEYCTL_WATCH_KEY(0x2, 0x0, 0xffffffffffffffff, 0x0) 00:46:17 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) 00:46:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000080)) 00:46:17 executing program 0: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffc) 00:46:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:17 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/net\x00') 00:46:17 executing program 0: prctl$PR_GET_TAGGED_ADDR_CTRL(0x1c) 00:46:17 executing program 2: unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="290000002000190f48003fffffffda060200000600e80300dd0000040d000c00ea0209f00005004c00", 0x29}], 0x1) 00:46:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2}) 00:46:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) 00:46:17 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') 00:46:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000400)) 00:46:17 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x680000, 0x0) ppoll(&(0x7f00000001c0)=[{}, {r0}], 0x2, &(0x7f0000000200)={0x77359400}, 0x0, 0x0) 00:46:17 executing program 1: syz_clone3(&(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000001a80)=""/56, 0x38, 0x0, 0x0}, 0x58) [ 408.641029][ T38] audit: type=1400 audit(1667177177.834:223): avc: denied { getopt } for pid=6765 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 00:46:17 executing program 0: ppoll(&(0x7f0000000080)=[{}, {}], 0x20000387, &(0x7f0000000100), &(0x7f0000000140), 0x8) [ 408.699128][ T6779] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 00:46:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x0, 0x0, 0x0, 0x566, 0x1}, 0x48) 00:46:17 executing program 3: accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x81800) 00:46:17 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000980), 0x8) syz_clone3(&(0x7f0000000500)={0x200024000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 00:46:17 executing program 0: prctl$PR_GET_TAGGED_ADDR_CTRL(0x37) 00:46:17 executing program 3: syz_clone3(&(0x7f0000000300)={0x200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) 00:46:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000540)=@raw=[@btf_id, @exit, @generic={0x1f}], &(0x7f0000000580)='GPL\x00', 0x7, 0x1000, &(0x7f00000009c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 00:46:17 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001a00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x596, 0x506, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 00:46:17 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x0, 0x11, r0, 0x0) 00:46:18 executing program 3: r0 = socket(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000004c0), r0) [ 408.810809][ T38] audit: type=1400 audit(1667177178.004:224): avc: denied { bind } for pid=6793 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 00:46:18 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 00:46:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) [ 408.832398][ T38] audit: type=1400 audit(1667177178.004:225): avc: denied { write } for pid=6798 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 00:46:18 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x20001, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x0, 0x11, r0, 0x0) 00:46:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x0, 0x0, 0x0, 0x566, 0x1, 0x5709}, 0x48) [ 408.855077][ T38] audit: type=1400 audit(1667177178.004:226): avc: denied { name_bind } for pid=6793 comm="syz-executor.0" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 00:46:18 executing program 2: sendto(0xffffffffffffffff, &(0x7f0000000000)="95", 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001080)) [ 408.883951][ T38] audit: type=1400 audit(1667177178.004:227): avc: denied { node_bind } for pid=6793 comm="syz-executor.0" saddr=172.20.20.187 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 408.906889][ T38] audit: type=1400 audit(1667177178.054:228): avc: denied { map } for pid=6797 comm="syz-executor.2" path="/dev/vcs" dev="devtmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 409.087892][ T3732] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 409.327721][ T3732] usb 6-1: Using ep0 maxpacket: 16 [ 409.458005][ T3732] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.468398][ T3732] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.476830][ T3732] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.657764][ T3732] usb 6-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.40 [ 409.663814][ T3732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.674895][ T3732] usb 6-1: Product: syz [ 409.678714][ T3732] usb 6-1: Manufacturer: syz [ 409.683070][ T3732] usb 6-1: SerialNumber: syz [ 409.969462][ T3732] usbhid 6-1:1.0: can't add hid device: -22 [ 409.973919][ T3732] usbhid: probe of 6-1:1.0 failed with error -22 [ 409.978844][ T3732] usb 6-1: USB disconnect, device number 8 00:46:19 executing program 1: prctl$PR_GET_TAGGED_ADDR_CTRL(0x34) 00:46:19 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x20}, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 00:46:19 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @multicast2}, {}, 0x42, {}, 'veth1_to_hsr\x00'}) 00:46:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000700)=@req={0x28, &(0x7f00000006c0)={'vlan0\x00', @ifru_ivalue}}) 00:46:19 executing program 0: socket(0xa, 0x6, 0x10001) 00:46:19 executing program 2: clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) select(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0xdd2a}, &(0x7f00000002c0)={0x0, r0/1000+60000}) 00:46:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20891) 00:46:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1, &(0x7f0000000540)=@raw=[@exit], &(0x7f0000000580)='GPL\x00', 0x7, 0x1000, &(0x7f00000009c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:19 executing program 1: timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, r0+60000000}}, 0x0) 00:46:19 executing program 3: syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x0) 00:46:19 executing program 0: prctl$PR_GET_TAGGED_ADDR_CTRL(0x1d) 00:46:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) 00:46:19 executing program 3: prctl$PR_GET_TAGGED_ADDR_CTRL(0x29) 00:46:19 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x10d000) 00:46:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) 00:46:19 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x10d000) 00:46:19 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 00:46:19 executing program 0: syz_clone3(&(0x7f0000001b80)={0x32840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x168, 0x168, 0x0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @dev, 0x0, 0x0, 'ip6tnl0\x00', 'pimreg1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @empty, 0x0, 0x0, 'lo\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x6}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) [ 410.574607][ T6843] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 410.579916][ T38] audit: type=1400 audit(1667177179.764:229): avc: denied { create } for pid=6845 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 00:46:19 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x1}, &(0x7f0000000040)=0x20) 00:46:19 executing program 0: syz_clone3(&(0x7f0000001b80)={0x32840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:19 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x10d000) 00:46:19 executing program 2: futex(&(0x7f0000000380), 0x4, 0x0, 0x0, 0x0, 0x0) 00:46:19 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x10d000) 00:46:19 executing program 2: rt_sigtimedwait(&(0x7f0000000240), 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8) 00:46:19 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x9, &(0x7f0000000000)=@framed={{}, [@cb_func, @initr0, @map_idx]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:19 executing program 0: syz_clone3(&(0x7f0000001b80)={0x32840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 00:46:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 00:46:19 executing program 0: syz_clone3(&(0x7f0000001b80)={0x32840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:19 executing program 2: timer_create(0x7, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, &(0x7f0000000300)) 00:46:19 executing program 1: syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) 00:46:19 executing program 3: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)="5e45cdd796f9578b407bb1748d19dbfe416292b586f93ec10c33a09baae9e9ab5399855a2a3f3c1a79e991d199fbc6d6f03ccecd88623eeb2e0ce786eb27d32a16978d661bc0292b93e6e218a444bdb0a95f05cafdffffea68cb3041134b0feae1a02d267e2c54200d22a0227d8771e4e9ccdfd9b0ca3c890991867783a5349a9493ceb881df1109cca19b0f863ff171cbee983059cc9a7798865c371dac1abcec2aeb89f3636a33e675601e085e1fe4af0211c4d6ee3ae2ccea5a29e76822db2d311555edb7d063dc7bcefa792ff010e3c9e7b201db4adb44", 0xfffffffffffffdcb) 00:46:19 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x8, 0xa, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:19 executing program 2: socket$inet(0x2, 0x5, 0x5) 00:46:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:46:19 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/stat\x00') ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 00:46:19 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x242080, 0x0) 00:46:19 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_ext={0x1c, 0x2, &(0x7f0000000000)=@raw=[@btf_id], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:19 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000000)={0x3, 0x0, @dev}, 0x10) 00:46:19 executing program 3: sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000740)) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff7}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)="af874462a6baa89742c51c14136123511cd2b9ccf932d7f3f36932e4e87d5e34077fc03fc0a822abe8c4b8fb20a0cb080a48693949915549acab8d792b54fcf88e189a03469e30c460a3fcbe76612dc3c7fb750be18e6d210f8ad7ec6682b01bdb3ae15242b726d9bdcc319f446abe16847ee836f5b46e6fe2fca50d0ef63ffcc8a53c574f1b283d9e6d6cbbe18266", 0x8f}, {0x0}, {0x0}, {&(0x7f0000001600)="7a08c0c25bb7f8", 0x7}], 0x4}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000001a00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x596, 0x506, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x5, 0x0, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5}}, [{}]}}}]}}]}}, &(0x7f0000001d40)={0x0, 0x0, 0xc, &(0x7f0000001a80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x49, &(0x7f0000001dc0)="f6e760c596f399a6c1519758bafc57db1147893e7edf655fe08f7e13bfe27af4134bbdddfda6c897524f6bc3440c60491a941ebacc71f3e8cd7de1d798a49b9240e84c0bc22ea4c4bb") 00:46:20 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001180)="a7", 0x1}], 0x1, &(0x7f00000012c0)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}], 0x30}}], 0x1, 0x0) 00:46:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), 0x4) 00:46:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) lseek(r0, 0x0, 0x0) 00:46:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)={0xe84, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_PMSR_ATTR_PEERS={0x180, 0x5, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x154, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xcdc, 0x5, 0x0, 0x1, [{0x14c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x100, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}]}, {0x35c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x134, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xb0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x760, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x230, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x46}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6723}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x78, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x79}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xcc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x24}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x130, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x403}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}]}, {0x4}, {0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}]}]}]}]}, 0xe84}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 00:46:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 00:46:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x6, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:20 executing program 1: timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x3}, 0x0) [ 411.058289][ T3776] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 411.297876][ T3776] usb 8-1: Using ep0 maxpacket: 16 [ 411.532710][ T3776] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 411.777691][ T3776] usb 8-1: string descriptor 0 read error: -22 [ 411.782686][ T3776] usb 8-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.40 [ 411.788400][ T3776] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.829774][ T3776] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 412.030919][ T3776] usb 8-1: USB disconnect, device number 6 00:46:21 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 00:46:21 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0}, 0x20) 00:46:21 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x668, 0x208, 0x208, 0xf0, 0xf0, 0x448, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@remote}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00], [], 'bridge_slave_1\x00', 'nr0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "15da8e3d66dfbdbc3402d470740d2c9826d3a5e68735b5b83d4b8e2652239a75595d4dc00c8c418efd081e1f2105afcc323a05e9e40ed0258fa49e4f3d0cb530"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28}, {"d26c"}}, @common=@unspec=@cluster={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) 00:46:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {}, {0x2, 0x0, @dev}, 0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='macvtap0\x00'}) [ 412.545620][ T6921] x_tables: duplicate underflow at hook 1 00:46:21 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x10040, 0x0) 00:46:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:21 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000980), 0x8) fchown(r0, 0xffffffffffffffff, 0x0) [ 412.563567][ T6923] x_tables: duplicate underflow at hook 3 00:46:21 executing program 0: timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}}, 0x0) 00:46:21 executing program 3: timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, &(0x7f0000000300)) 00:46:21 executing program 1: socket(0x7f, 0x0, 0x0) 00:46:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x5, &(0x7f0000000000)=@framed={{}, [@initr0]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000f00)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 00:46:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f0000000500)) [ 412.609356][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 412.609372][ T38] audit: type=1400 audit(1667177181.804:231): avc: denied { node_bind } for pid=6938 comm="syz-executor.3" saddr=ff01::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 412.639465][ C2] hpet: Lost 1 RTC interrupts 00:46:21 executing program 3: timer_create(0x0, 0x0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, r0+60000000}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f00000005c0)) 00:46:21 executing program 0: timer_create(0x7, 0x0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, r0+60000000}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f00000005c0)) 00:46:21 executing program 2: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001a00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x596, 0x506, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001d40)={0x0, 0x0, 0x14, &(0x7f0000001a80)={0x5, 0xf, 0x14, 0x2, [@generic={0x3}, @ssp_cap={0xc}]}}) 00:46:21 executing program 3: futex(&(0x7f0000000380), 0x0, 0x0, &(0x7f0000000440)={0x0, 0x989680}, 0x0, 0x0) 00:46:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8002, @remote}, 0x10) 00:46:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) 00:46:21 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='environ\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 00:46:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000010c0)={0x2, 0x4e23, @empty}, 0x10) 00:46:21 executing program 0: timer_create(0x0, 0x0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, r0+60000000}}, 0x0) 00:46:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='batadv_slave_1\x00'}) [ 412.937794][ T825] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 413.177713][ T825] usb 7-1: Using ep0 maxpacket: 16 [ 413.377906][ T825] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 413.538057][ T825] usb 7-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.40 [ 413.544926][ T825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.552840][ T825] usb 7-1: Product: syz [ 413.557026][ T825] usb 7-1: Manufacturer: syz [ 413.564125][ T825] usb 7-1: SerialNumber: syz [ 413.610348][ T825] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 413.815014][ T3776] usb 7-1: USB disconnect, device number 2 00:46:23 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000980), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) 00:46:23 executing program 3: syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) 00:46:23 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x668, 0x208, 0x208, 0xf0, 0xf0, 0x448, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@remote}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge_slave_1\x00', 'nr0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "15da8e3d66dfbdbc3402d470740d2c9826d3a5e68735b5b83d4b8e2652239a75595d4dc00c8c418efd081e1f2105afcc323a05e9e40ed0258fa49e4f3d0cb530"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28}, {"d26c"}}, @common=@unspec=@cluster={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) 00:46:23 executing program 1: futex(0x0, 0x4, 0x0, 0x0, &(0x7f0000000400), 0x0) [ 414.329747][ T6966] x_tables: duplicate underflow at hook 1 00:46:23 executing program 3: r0 = socket(0x11, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, 0x0) 00:46:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x0, 0x6000, 0x0, 0x0) 00:46:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) [ 414.340826][ T38] audit: type=1400 audit(1667177183.534:232): avc: denied { setopt } for pid=6969 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 00:46:23 executing program 2: signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) clock_gettime(0x0, &(0x7f0000000100)) 00:46:23 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0xffffffffffffffff, 0x0) 00:46:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1, &(0x7f0000000200)=@raw=[@kfunc], &(0x7f0000000240)='GPL\x00', 0x9, 0x9a, &(0x7f0000000280)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:23 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000d80)='ceph\x00', 0x0, 0xfffffffffffffffa) [ 414.362639][ T38] audit: type=1400 audit(1667177183.544:233): avc: denied { getopt } for pid=6971 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 00:46:23 executing program 2: timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}}, 0x0) 00:46:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0x96, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) 00:46:23 executing program 3: syz_clone3(&(0x7f0000000240)={0x8aa800, 0x0, 0x0, 0x0, {}, &(0x7f00000000c0)=""/7, 0x7, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) [ 414.379282][ T38] audit: type=1400 audit(1667177183.554:234): avc: denied { read } for pid=6972 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 00:46:23 executing program 0: clock_gettime(0x0, &(0x7f0000000280)={0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={r0}) 00:46:23 executing program 1: timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f00000005c0)) 00:46:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) 00:46:23 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x10f000, 0x0) 00:46:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) 00:46:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@empty, @broadcast}, 0x8) 00:46:23 executing program 3: socket$inet(0x2, 0x2, 0x11) 00:46:23 executing program 1: clock_gettime(0x0, &(0x7f0000000580)={0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={r0}) [ 414.428650][ T38] audit: type=1400 audit(1667177183.624:235): avc: denied { map } for pid=6999 comm="syz-executor.2" path="socket:[45152]" dev="sockfs" ino=45152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 00:46:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x7, 0x0, &(0x7f0000000080)) 00:46:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x0, 0x80010043, 0x0, 0x0) 00:46:24 executing program 3: socket(0x10, 0x0, 0x5) 00:46:24 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom0\x00', 0x0, 0x0) 00:46:24 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, &(0x7f0000000040)) [ 415.257827][ T38] audit: type=1400 audit(1667177184.454:236): avc: denied { create } for pid=7008 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 00:46:24 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000980), 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 00:46:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) 00:46:24 executing program 0: timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_gettime(0x0, 0x0) 00:46:24 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={0xffffffffffffffff, 0x13, 0x0, 0x0, 0x0}, 0x20) 00:46:24 executing program 1: prctl$PR_GET_TAGGED_ADDR_CTRL(0x16) 00:46:24 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) [ 415.300185][ T38] audit: type=1400 audit(1667177184.484:237): avc: denied { accept } for pid=7015 comm="syz-executor.1" path="socket:[45164]" dev="sockfs" ino=45164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 00:46:24 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0, 0x0, 0xe55f5c33c3df4951}, 0x10) 00:46:24 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"89920bd5e6c26dd7bacbaa5b822e4d08"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001080)) 00:46:24 executing program 3: futex(&(0x7f0000000000), 0x0, 0x1, 0x0, 0x0, 0x0) 00:46:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {}, {0x2, 0x0, @dev}, 0x44}) 00:46:24 executing program 0: syz_clone3(&(0x7f0000000300)={0x200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @dev}}) 00:46:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) fchown(r0, 0x0, 0xee00) 00:46:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) 00:46:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8, @dev}, 0x10) 00:46:24 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) [ 415.379549][ T38] audit: type=1400 audit(1667177184.574:238): avc: denied { setattr } for pid=7043 comm="syz-executor.3" name="NETLINK" dev="sockfs" ino=47105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 00:46:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000440)={'mangle\x00', 0x4, "4ec1005b"}, &(0x7f0000000500)=0x28) 00:46:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) 00:46:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000000)={0xa, 0x0, @dev}, 0x10) 00:46:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x8, &(0x7f0000000000)=@framed={{}, [@cb_func, @initr0, @call]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x6, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) 00:46:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000080)) 00:46:24 executing program 1: syz_clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {0x45}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:24 executing program 0: sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f0000001780), &(0x7f00000017c0), &(0x7f0000001800)) 00:46:24 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0) 00:46:24 executing program 2: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/13, 0xd) 00:46:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) getpeername$inet(r0, 0x0, 0x0) 00:46:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x8, @dev}, 0x10) 00:46:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r0) 00:46:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0xb, 0x11, 0x0, &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:24 executing program 1: sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x9f41c0388199ab8d) 00:46:24 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d80)='net/psched\x00') 00:46:24 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @remote, 0x1, 0x1, [@loopback]}, 0x14) 00:46:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x168, 0x168, 0x0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @dev, 0x0, 0x0, 'ip6tnl0\x00', 'pimreg1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @empty, 0x0, 0x0, 'lo\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0xffffffffffffffff, 0x0, 0xee01, 0xee01}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) [ 415.459327][ T38] audit: type=1400 audit(1667177184.654:239): avc: denied { name_bind } for pid=7073 comm="syz-executor.0" src=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 00:46:24 executing program 1: prctl$PR_GET_TAGGED_ADDR_CTRL(0x1b) 00:46:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 00:46:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) [ 415.496760][ T7086] x_tables: duplicate underflow at hook 2 00:46:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0xf03afffe) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f000}) 00:46:24 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='environ\x00') getsockname$inet6(r0, 0x0, 0x0) 00:46:24 executing program 2: socket(0x2c, 0x3, 0x2) 00:46:24 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, 0x0) 00:46:24 executing program 1: prctl$PR_GET_TAGGED_ADDR_CTRL(0x19) 00:46:24 executing program 2: prctl$PR_GET_TAGGED_ADDR_CTRL(0x10) 00:46:24 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00') mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 00:46:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001eaed1"], 0x28}}, 0x0) 00:46:25 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000980), 0x8) connect$bt_rfcomm(r0, 0x0, 0x0) 00:46:25 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)=0x0) timer_settime(r1, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 00:46:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}}) 00:46:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0xf03afffe) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f000}) 00:46:25 executing program 2: syz_clone3(&(0x7f0000000240)={0x8aa800, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000040)={0x2, 0x8, @multicast1}, 0x10) 00:46:25 executing program 2: syz_clone3(&(0x7f0000001b80)={0x32840000, 0x0, &(0x7f0000001a00), &(0x7f0000001a40), {}, &(0x7f0000001a80)=""/56, 0x38, 0x0, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) 00:46:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x168, 0x168, 0x0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @dev, 0x0, 0x0, 'ip6tnl0\x00', 'pimreg1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @empty, 0x0, 0x0, 'lo\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 00:46:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x168, 0x168, 0x0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @dev, 0x0, 0x0, 'ip6tnl0\x00', 'pimreg1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @empty, 0x0, 0x0, 'lo\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 00:46:25 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)=0x0) timer_settime(r1, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 00:46:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x98, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) 00:46:26 executing program 2: r0 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x168, 0x168, 0x0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @dev, 0x0, 0x0, 'ip6tnl0\x00', 'pimreg1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @empty, 0x0, 0x0, 'lo\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 00:46:26 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)=0x0) timer_settime(r1, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 00:46:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0xf03afffe) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f000}) 00:46:26 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 00:46:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x168, 0x168, 0x0, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @dev, 0x0, 0x0, 'ip6tnl0\x00', 'pimreg1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @empty, 0x0, 0x0, 'lo\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 00:46:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='batadv_slave_1\x00'}) 00:46:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x21, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:26 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @remote, 0x1}, 0x10) 00:46:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x80000) 00:46:26 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x12}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f00000001c0)={0x0}) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r0}}, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)=0x0) timer_settime(r1, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) [ 417.964201][ T7139] syz-executor.2 (7139) used greatest stack depth: 22896 bytes left 00:46:27 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0xa02, 0x0) 00:46:27 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff}) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 00:46:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}}) 00:46:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0xf03afffe) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f000}) 00:46:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) 00:46:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:46:27 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 00:46:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2010, r0, 0x0) 00:46:28 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) 00:46:28 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0), 0x20001, 0x0) 00:46:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) fchdir(r0) 00:46:28 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) 00:46:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x300, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip_vti0\x00', 'ipvlan0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@local}}, @common=@icmp={{0x28}, {0x0, 'J`'}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@remote, @empty, 0x0, 0x0, 'dummy0\x00', 'lo\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'ipvlan0\x00', 'dvmrp0\x00'}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @common=@CLUSTERIP={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) [ 419.089906][ T7184] x_tables: duplicate underflow at hook 2 00:46:28 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='environ\x00') 00:46:28 executing program 2: prctl$PR_GET_TAGGED_ADDR_CTRL(0x2c) 00:46:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:46:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x3a8, 0x1d8, 0x1d8, 0x2e8, 0x3a8, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'veth1_to_bridge\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@set4={{0x50}}]}, @TTL={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'bond0\x00', 'veth1\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) 00:46:28 executing program 1: prctl$PR_GET_TAGGED_ADDR_CTRL(0xe) 00:46:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1, &(0x7f0000000200)=@raw=[@kfunc], &(0x7f0000000240)='GPL\x00', 0x0, 0x9a, &(0x7f0000000280)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:28 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000980), 0x8) accept4$inet(r0, 0x0, 0x0, 0x40800) [ 419.125125][ T7195] x_tables: duplicate underflow at hook 1 00:46:28 executing program 3: syz_clone3(&(0x7f00000002c0)={0x100000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:28 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_clone3(&(0x7f0000001b80)={0x32840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[0x0], 0x1}, 0x58) 00:46:28 executing program 2: timer_create(0x0, 0x0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, r0+60000000}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {r1}}, &(0x7f0000000380)) 00:46:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x0, @multicast1}, {0x306, @broadcast}, 0x3c, {0x2, 0x0, @multicast1}, 'batadv_slave_0\x00'}) 00:46:28 executing program 0: syz_clone(0x52188080, 0x0, 0xffffffffffffffdd, 0x0, 0x0, 0x0) 00:46:28 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"89920bd5e6c26dd7bacbaa5b822e4d08", 0x0, 0x0, {}, {0xfffffffffffffffd, 0x1}, 0x4, [0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5]}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001080)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000010c0)={0x0, @in={0x2, 0x4e21, @multicast1}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @phonet, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000019c0)='devices.deny\x00', 0x2, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x34, &(0x7f0000001dc0)="f6e760c596f399a6c1519758bafc57db1147893e7edf655fe08f7e13bfe27af4134bbdddfda6c897524f6bc3440c60491a941eba") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) syz_open_procfs(0x0, &(0x7f0000001ec0)='net/udplite6\x00') 00:46:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@remote, @in6=@private2}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f0000000140)=0xffffffffffffff28) 00:46:28 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_clone3(&(0x7f0000001b80)={0x32840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[0x0], 0x1}, 0x58) 00:46:28 executing program 3: futex(&(0x7f0000000380), 0x4, 0x0, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f0000000400), 0x2) 00:46:28 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000980), 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) 00:46:28 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_clone3(&(0x7f0000001b80)={0x32840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[0x0], 0x1}, 0x58) 00:46:28 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000980), 0x8) bind$inet(r0, 0x0, 0x0) 00:46:28 executing program 0: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) 00:46:28 executing program 2: futex(0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x989680}, 0x0, 0x0) 00:46:28 executing program 0: timer_create(0x6, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 00:46:28 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x0, 0x0, 0x0, 0x566, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x48) 00:46:28 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_clone3(&(0x7f0000001b80)={0x32840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[0x0], 0x1}, 0x58) 00:46:28 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x8]}, 0x8}) 00:46:29 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:46:29 executing program 0: syz_clone3(&(0x7f0000000240)={0x8aa800, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x401, 0x4) 00:46:29 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000980), 0x8) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 00:46:29 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000100), 0x205, 0x0, 0x4, &(0x7f0000001480)=""/89, 0x59}, 0x0) 00:46:29 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x668, 0x208, 0x208, 0xf0, 0xf0, 0x448, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@remote}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge_slave_1\x00', 'nr0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "15da8e3d66dfbdbc3402d470740d2c9826d3a5e68735b5b83d4b8e2652239a75595d4dc00c8c418efd081e1f2105afcc323a05e9e40ed0258fa49e4f3d0cb530"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28}, {"d26c"}}, @common=@unspec=@cluster={{0x30}, {0x1000}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@frag={{0x30}}, @common=@srh={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c8) 00:46:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x2102, 0x0, 0x0) [ 419.889437][ T7253] x_tables: duplicate underflow at hook 1 00:46:29 executing program 2: syz_open_dev$loop(&(0x7f00000004c0), 0x8000000000000000, 0x280000) 00:46:29 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)=ANY=[]) 00:46:29 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 00:46:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x608, 0x208, 0x208, 0xf0, 0xf0, 0x448, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@remote}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge_slave_1\x00', 'nr0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "15da8e3d66dfbdbc3402d470740d2c9826d3a5e68735b5b83d4b8e2652239a75595d4dc00c8c418efd081e1f2105afcc323a05e9e40ed0258fa49e4f3d0cb530"}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28}, {"d26c"}}, @common=@unspec=@cluster={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x668) 00:46:29 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x101801, 0x0) 00:46:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x300, 0xf0, 0xf0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip_vti0\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}, {{@ip={@remote, @empty, 0x0, 0x0, 'dummy0\x00', 'lo\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'ipvlan0\x00', 'dvmrp0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 00:46:29 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0xee01) 00:46:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r3 = getegid() r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) sendmmsg$unix(r1, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="d0348d8638f4caa7581039019d2820f4c09828f7ef1626a1746a0400efd10c4a81c27975835d3fb3049d1c4f76957caec0f3bced75fd41a6b4a0c5855e55f5cb75304096febe7131dcd363f9909eb783ded6d02269035bb4f38261d7f06f3862dfc3bdcd13cb298790b0f676a9dcb4249d8f40e69acb4e3cf600db4550f133b6c2bb48e7bd60b9762c76123bf1a3fbfca208ca1601a02956d5ab5c6d9db889334d63bf7aecc7", 0xa6}, {&(0x7f0000000040)="20f7eee618bfd43ce1", 0x9}], 0x3, &(0x7f0000001400)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r3}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, r5}}}], 0xc8, 0xceee58e8c196c59b}}], 0x1, 0x4000000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000f, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}], 0x0, &(0x7f0000000380)=ANY=[], 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) dup3(r6, r1, 0x80000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) [ 419.940372][ T38] kauditd_printk_skb: 2 callbacks suppressed 00:46:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x2, &(0x7f0000000540)=@raw=[@cb_func], &(0x7f0000000580)='GPL\x00', 0x7, 0x1000, &(0x7f00000009c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000005c0)=0x1c) 00:46:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000340)) [ 419.940384][ T38] audit: type=1400 audit(1667177189.134:242): avc: denied { setattr } for pid=7262 comm="syz-executor.1" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 419.962356][ T38] audit: type=1400 audit(1667177189.134:243): avc: denied { write } for pid=7263 comm="syz-executor.2" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 00:46:29 executing program 1: prctl$PR_GET_TAGGED_ADDR_CTRL(0x53564d41) 00:46:29 executing program 0: prctl$PR_GET_TAGGED_ADDR_CTRL(0x3a) [ 419.981506][ T38] audit: type=1400 audit(1667177189.174:244): avc: denied { getopt } for pid=7274 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 00:46:29 executing program 0: rt_sigtimedwait(&(0x7f0000000480), 0x0, &(0x7f0000000540), 0x8) 00:46:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffde0, 0x0, 0x0, 0x0, 0x0, {}, ["", "", "", ""]}, 0x1c}}, 0x0) [ 420.007008][ T7284] loop3: detected capacity change from 0 to 1024 [ 420.012804][ T7284] ext4: Unknown parameter 'ʟJ~t[ȕZ])-REW>>T2LA%}x' 00:46:29 executing program 3: unshare(0x40000200) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="290000002000190f48003fffffffda060200000600e80300dd0000040d000c00ea0209f00005004c00", 0x29}], 0x1) 00:46:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 00:46:29 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 00:46:29 executing program 1: timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, r0+60000000}}, &(0x7f0000000380)) 00:46:29 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 00:46:29 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000500)) 00:46:29 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x18f200, 0x0) 00:46:29 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) [ 420.133989][ T7301] netlink: 'syz-executor.3': attribute type 12 has an invalid length. 00:46:29 executing program 3: futex(&(0x7f0000000380), 0x4, 0x0, 0x0, &(0x7f0000000400), 0x0) 00:46:29 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x110, 0x220, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@remote, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dummy0\x00', 'veth0_vlan\x00', {}, {}, 0x0, 0x404}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private, @remote}}}, {{@arp={@multicast1, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @broadcast}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@dev, @dev, @multicast2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 00:46:29 executing program 1: syz_open_dev$loop(&(0x7f00000004c0), 0x8000000000000000, 0x0) 00:46:29 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 00:46:29 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001a00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x596, 0x506, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000001d40)={0x0, 0x0, 0x8, &(0x7f0000001a80)={0x5, 0xf, 0x8, 0x1, [@generic={0x3}]}}) 00:46:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1, &(0x7f0000000200)=@raw=[@kfunc], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:46:29 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) 00:46:29 executing program 3: timer_create(0x0, 0x0, &(0x7f00000003c0)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, r0+60000000}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380)) 00:46:29 executing program 1: timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_gettime(0x0, &(0x7f00000005c0)) 00:46:29 executing program 2: socket(0x2, 0x6, 0x10000004) 00:46:29 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00'}, 0x10) 00:46:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) [ 420.468394][ T825] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 420.707730][ T825] usb 5-1: Using ep0 maxpacket: 16 [ 420.928012][ T825] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 421.088140][ T825] usb 5-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.40 [ 421.095813][ T825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.102609][ T825] usb 5-1: Product: syz [ 421.106197][ T825] usb 5-1: Manufacturer: syz [ 421.109689][ T825] usb 5-1: SerialNumber: syz [ 421.150570][ T825] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 421.353490][ T825] usb 5-1: USB disconnect, device number 4 00:46:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x31d8dfb30bcaf7f9) 00:46:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, 0x0) 00:46:31 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001a00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x596, 0x506, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 00:46:31 executing program 1: prctl$PR_GET_TAGGED_ADDR_CTRL(0x21) 00:46:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) 00:46:31 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000980), 0x8) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0) dup3(r0, r1, 0x0) 00:46:31 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 00:46:31 executing program 2: r0 = openat$autofs(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18}, './file0\x00'}) 00:46:31 executing program 3: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x29, 0xe0, 0x48, [{{0x9, 0x4, 0x0, 0x66, 0x2, 0x7, 0x1, 0x3, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x90, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x20, 0x1, 0x40}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x7, 0x1, 0x7, 0x40, 0x40}, 0x5c, &(0x7f0000000080)={0x5, 0xf, 0x5c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "1b30c8d4f34d80a46c41c52dc658bd4e"}, @generic={0x43, 0x10, 0x2, "bfb56b4ab44a8cda6deb1fbf2578fc25f9d55db354f72008a8f84d24a29cd6b2b4b38841c4d2ea5950d6e3b43b56f0f5bb52e009c7c1b82834bd46511136aa58"}]}, 0x7, [{0x9c, &(0x7f0000000100)=@string={0x9c, 0x3, "12ce54c95b2884d555dd7a561c03ef11c83275f3fa47a497b1fb31b4e4afa183cf27b2de110d00889cff3ac3dcc9566e2db95372e58e3276ad9305d7accf0672887ad043083c2dfca69306d2d6ab4265220f665acb1d311966076dad4a38499253ac5a444f70e6831d05e228353e2a5534b1c5a2cc9994e37128de7275c5252f24eceaead0fba64b3da9ad64b0116d96058a485d49cab02eafd7"}}, {0x1a, &(0x7f00000001c0)=@string={0x1a, 0x3, "5d12dfadd52e2651ff4c9385e1e7acaf0ccfc5e30b25a75c"}}, {0x9b, &(0x7f0000000200)=@string={0x9b, 0x3, "7602f69eed7967449803b1839dbb05489cbee82bb0cef07e714bc9a0cb03432ff2850e3813f0ab761e52d29329604fa347dffd3a77a04b3af537c42c0fe48f46a261421c8bf855d8599914b14a8816d929a43ef550d75022aeebbe7d0a81f1d480e0288ec9ee1a84f107bf666f16f2f33fc1ec9a5fc50e16db03d621318ba7fcc3665ba0dd8ec3fec39d7a7cd353f575929bdebec8bf834dd6"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x807}}, {0xb1, &(0x7f0000000340)=@string={0xb1, 0x3, "1e340c027d2e0f8002a5e871bc03f573e6314ee3496e81ca427cda63affd0a3b824ab21e1e899639ad9502396469ddae2c30988cbe8f820ad4b0574dc5b99562ab35858762516976393e0fb54a0a0b47e179424eeea7512a0cda698ed9a447857faf09596c42484b73c7d8ac1b68e64487aa9d8616044734076aece83c8cac765d21853d1f858323663cd58327a67c48c706857edcf0ffeb8df0ae513b1a67f14a56250099205c6433b2e3276fe2e4"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x810}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000600)={0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="500353000000530a8a5d887c9cb8164765689f47ec3280e4cb8e09fd4d8c7766221ddb8ad72f32e04cb8bb64611d14b14455004654122e54a715df0ab2b789981240d21c26c5435ce4d20a81050659a4ba1d2ac48ef52f4151c05ab3c662208fcd5b08103b3a1ea1d7383441851e758e3257601884d4f6a5031b21703f1f3bea5e0d0729af93b0"], &(0x7f0000000540)={0x0, 0x3, 0x90, @string={0x90, 0x3, "42d140d7f2587f6f39d5b9bb361511a686038f2adca4c80500a3b87bb770e3e68847fedc5eb7a226c9b23472c4560d3410a8b82ed8f84b227ca3ee50b4702ae53d9ed14b8dd22e717a992d6241f1e26b1afe56d39236beba6b50ee4e345a4e7a721ee03a86291df62cd77d288384cd759d5e5d0ae04afc6ffe8121f76c59db36a98114e94a284ea6678d1e42ff2f"}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000640)={0x0, 0x7, 0xdf, "81e7b2709cdc8e51cc8d382d75ff7d7e4458af3484a52dc1cea96ca59f2bdef66fedce1efefa32d25dbd77a08546312e53a4e226f2ca6db6f96dfd3cc3d5afebcda990e44145a27b326f84385bd195c3bd07d24a73a424f8d74fe8f8299b658e6f7907446b61fa8148e129872c6fac14a489acbcda63009aff5a402e37371c3b41a2fd0cbefbca3ba30afbd9d4087ed1c7fcba15cc57454af44f45e9f10a1221b63c07d3e798bfa5c26a5b42fd409a2c848961062c1fa108affab903c6fe3928af6d16a13ab8dfb7eb353d6c4441cea157c46d985e2fbc29ec8268a360441b"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000007c0)={0x20, 0x0, 0x68, {0x66, "42e020b3e2c5eafb2dd1d2eb2c7d91667706992bc0be966ecdf73b5bb278be5aa54def451f0435cd14553eb3f3dc6e7d30e6a0e2d5e04828bff3c3ca9fc4ff53d3218102256a14b613602daa06cd2c15f6bd7b05025217525c988cd5ce53526e4bbf5e3a7f21"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x5}}) 00:46:31 executing program 1: semget$private(0x2, 0x3, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 00:46:31 executing program 2: syz_clone3(&(0x7f0000002740)={0x20000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 421.921440][ T38] audit: type=1400 audit(1667177191.114:245): avc: denied { read } for pid=7338 comm="syz-executor.2" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 421.944683][ T38] audit: type=1400 audit(1667177191.114:246): avc: denied { open } for pid=7338 comm="syz-executor.2" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 421.964070][ T38] audit: type=1400 audit(1667177191.114:247): avc: denied { ioctl } for pid=7338 comm="syz-executor.2" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 422.157770][ T3776] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 422.283035][ T825] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 422.283368][ T3785] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 422.285252][ C2] hpet: Lost 5 RTC interrupts [ 422.419151][ T3776] usb 5-1: Using ep0 maxpacket: 16 [ 422.547941][ T3776] usb 5-1: unable to get BOS descriptor or descriptor too short [ 422.608122][ T3776] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 422.612790][ T3776] usb 5-1: can't read configurations, error -71 [ 422.759530][ T3785] usb 8-1: config 1 interface 0 altsetting 102 bulk endpoint 0x1 has invalid maxpacket 16 [ 422.767312][ T3785] usb 8-1: config 1 interface 0 altsetting 102 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.774309][ T3785] usb 8-1: config 1 interface 0 altsetting 102 bulk endpoint 0x82 has invalid maxpacket 0 [ 422.781535][ T3785] usb 8-1: config 1 interface 0 has no altsetting 0 [ 422.847797][ T825] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 422.856482][ T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.865330][ T825] usb 6-1: Product: syz [ 422.869575][ T825] usb 6-1: Manufacturer: syz [ 422.876450][ T825] usb 6-1: SerialNumber: syz [ 422.928833][ T825] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 422.939218][ T3785] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 422.953859][ T3785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.961345][ T3785] usb 8-1: Product: ɶ黶秭䑧Θ莱뮝䠅뺜⯨캰绰䭱ꃉϋ⽃藲㠎皫刞鏒怩ꍏ㫽ꁷ㩋㟵Ⳅ䚏憢᱂饙넔衊ꐩ흐≐綾脊퓱踨萚߱暿ᙯ섿髬앟ᘎϛ⇖謱ﲧ曃ꁛ軝ﻃ鷃籺叓痵鮒뻞뿈䶃 [ 422.980705][ T3785] usb 8-1: Manufacturer: ቝ귟⻕儦䳿薓꾬켌┋岧 [ 422.986713][ T3785] usb 8-1: SerialNumber: 㠊 00:46:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x801}, 0x10) 00:46:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8010000010701"], 0x1b8}}, 0x0) [ 422.998354][ T38] audit: type=1400 audit(1667177192.194:248): avc: denied { create } for pid=7349 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 423.007482][ T7350] netlink: 420 bytes leftover after parsing attributes in process `syz-executor.2'. 00:46:32 executing program 0: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x402c5829, 0x0) [ 423.008447][ T7343] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 423.010687][ T7352] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. [ 423.013234][ T38] audit: type=1400 audit(1667177192.194:249): avc: denied { write } for pid=7349 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 00:46:32 executing program 0: r0 = openat$pidfd(0xffffff9c, &(0x7f00000001c0), 0x618002, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) 00:46:32 executing program 0: openat$userio(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) [ 423.207173][ C2] hpet: Lost 4 RTC interrupts [ 423.540091][ T3785] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 102 proto 3 vid 0x0525 pid 0xA4A8 [ 423.554941][ T3785] usb 8-1: USB disconnect, device number 7 [ 423.561532][ T3785] usblp0: removed [ 423.667769][ T825] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 423.872112][ T3732] usb 6-1: USB disconnect, device number 9 00:46:33 executing program 3: syz_clone3(&(0x7f0000001580)={0xc0244000, 0x0, &(0x7f0000000040), &(0x7f0000000000), {0x5}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f00000000c0)=""/189, &(0x7f0000001500)=[0x0, 0x0], 0x2}, 0x58) 00:46:33 executing program 2: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x4020940d, 0x0) 00:46:33 executing program 0: openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_clone3(0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000001580)={0xc0244000, &(0x7f00000014c0), &(0x7f0000000040), &(0x7f0000000000), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:33 executing program 3: syz_clone3(&(0x7f0000001580)={0xc0244000, 0x0, &(0x7f0000000040), &(0x7f0000000000), {0x5}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f00000000c0)=""/189, &(0x7f0000001500)=[0x0, 0x0], 0x2}, 0x58) 00:46:33 executing program 1: openat$thread_pidfd(0xffffff9c, &(0x7f0000001580), 0x10040, 0x0) 00:46:33 executing program 2: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) openat$ubi_ctrl(0xffffff9c, &(0x7f0000001540), 0x9c000, 0x0) syz_clone3(&(0x7f0000001580)={0xc0244000, &(0x7f00000014c0), &(0x7f0000000040), 0x0, {}, &(0x7f0000000240)=""/4096, 0x1000, 0x0, &(0x7f0000001500)=[0x0], 0x1}, 0x58) 00:46:33 executing program 1: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) io_submit(r0, 0x1, &(0x7f00000007c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}]) 00:46:33 executing program 1: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x402c5828, 0x0) 00:46:33 executing program 1: semget$private(0x2, 0x0, 0x6c0) 00:46:33 executing program 2: socket(0x22, 0x0, 0x3ff) 00:46:33 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) 00:46:33 executing program 2: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x40046602, 0x0) 00:46:33 executing program 0: r0 = getpgrp(0x0) sched_setattr(r0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) 00:46:33 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 00:46:33 executing program 2: r0 = getpgrp(0x0) pidfd_open(r0, 0x0) 00:46:33 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) fstat(r0, &(0x7f0000000000)) [ 424.727709][ T825] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive 00:46:33 executing program 2: r0 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) fstat(r0, &(0x7f0000000080)) [ 424.738151][ T825] ath9k_htc: Failed to initialize the device [ 424.743073][ T3732] usb 6-1: ath9k_htc: USB layer deinitialized 00:46:33 executing program 0: io_setup(0x1b97, &(0x7f0000000000)) syz_clone3(&(0x7f0000000400)={0x100204000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 424.988839][ T173] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 425.097774][ T3732] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 425.499360][ T3732] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 425.557846][ T173] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 425.568859][ T173] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.576219][ T173] usb 8-1: Product: syz [ 425.579712][ T173] usb 8-1: Manufacturer: syz [ 425.582951][ T173] usb 8-1: SerialNumber: syz [ 425.629065][ T173] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 425.697863][ T3732] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 425.704868][ T3732] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.714194][ T3732] usb 6-1: Product: syz [ 425.717525][ T3732] usb 6-1: Manufacturer: syz [ 425.721875][ T3732] usb 6-1: SerialNumber: syz [ 425.981300][ T3785] usb 6-1: USB disconnect, device number 10 [ 426.217717][ T173] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 426.425062][ T176] usb 8-1: USB disconnect, device number 8 00:46:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYBLOB="01"], 0x40}}, 0x0) 00:46:35 executing program 2: openat$ubi_ctrl(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) 00:46:36 executing program 3: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x0) 00:46:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01"], 0x40}}, 0x0) 00:46:36 executing program 2: syz_clone3(&(0x7f0000002740)={0x20000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002700)=[0xffffffffffffffff], 0x1}, 0x58) 00:46:36 executing program 1: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 00:46:36 executing program 0: syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 426.957466][ T38] kauditd_printk_skb: 5 callbacks suppressed 00:46:36 executing program 3: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x0) 00:46:36 executing program 1: r0 = syz_usbip_server_init(0x3) write$usbip_server(r0, &(0x7f0000000000)=@ret_unlink={{}, {0x5}}, 0x30) [ 426.957482][ T38] audit: type=1400 audit(1667177196.144:255): avc: denied { map } for pid=7410 comm="syz-executor.3" path="/dev/ubi_ctrl" dev="devtmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 00:46:36 executing program 2: syz_clone3(&(0x7f0000002740)={0x20000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002700)=[0xffffffffffffffff], 0x1}, 0x58) 00:46:36 executing program 3: io_setup(0x1b97, &(0x7f0000000000)) [ 426.995444][ T7420] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 427.000324][ T7420] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 427.005982][ T7420] vhci_hcd vhci_hcd.0: Device attached [ 427.017491][ T7422] vhci_hcd: cannot find the pending unlink 0 00:46:36 executing program 2: io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f0000001800)=[0x0]) [ 427.023166][ T7422] vhci_hcd: connection closed [ 427.023612][ T4963] vhci_hcd: stop threads [ 427.034466][ T4963] vhci_hcd: release socket [ 427.038085][ T4963] vhci_hcd: disconnect device 00:46:36 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000600), &(0x7f0000000680)=0x80) 00:46:36 executing program 3: io_setup(0x1ec9, &(0x7f0000000040)) [ 427.113104][ T38] audit: type=1400 audit(1667177196.304:256): avc: denied { getopt } for pid=7428 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 427.297918][ T173] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 427.303631][ T173] ath9k_htc: Failed to initialize the device [ 427.312918][ T176] usb 8-1: ath9k_htc: USB layer deinitialized 00:46:36 executing program 2: futex_waitv(&(0x7f0000001ec0)=[{0x0, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000002a00)={0x0, 0x3938700}, 0x0) 00:46:36 executing program 0: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) 00:46:36 executing program 1: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000480), 0x600000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, 0x0, 0x0) 00:46:36 executing program 3: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, 0x0) 00:46:36 executing program 2: socket(0x28, 0x0, 0x100) 00:46:36 executing program 2: openat$autofs(0xffffff9c, 0x0, 0xc0, 0x0) 00:46:36 executing program 3: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x541b, 0x0) 00:46:36 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10}}}}}]}}]}}, 0x0) 00:46:36 executing program 3: openat$ubi_ctrl(0xffffff9c, 0x0, 0x0, 0x0) io_setup(0x1b97, &(0x7f0000000000)) [ 427.769326][ T7401] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 427.827979][ T173] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 428.128012][ T7401] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 428.134986][ T7401] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 428.142163][ T7401] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 428.148666][ T7401] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 428.207834][ T173] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 428.308540][ T7401] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 428.316121][ T7401] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.323055][ T7401] usb 5-1: Product: syz [ 428.326712][ T7401] usb 5-1: Manufacturer: syz [ 428.331188][ T7401] usb 5-1: SerialNumber: syz [ 428.387913][ T173] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 428.394265][ T173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.400815][ T173] usb 6-1: Product: syz [ 428.404177][ T173] usb 6-1: Manufacturer: syz [ 428.407085][ T173] usb 6-1: SerialNumber: syz [ 428.428080][ T7449] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 428.591516][ T7401] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 428.600905][ T7401] usb 5-1: USB disconnect, device number 7 [ 428.605807][ T7401] usblp0: removed [ 428.650512][ T176] usb 6-1: USB disconnect, device number 11 00:46:38 executing program 0: r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) 00:46:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 00:46:38 executing program 3: openat$userio(0xffffff9c, &(0x7f0000000000), 0x84000, 0x0) 00:46:38 executing program 0: openat$pidfd(0xffffff9c, &(0x7f00000001c0), 0x618002, 0x0) 00:46:38 executing program 3: openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x88c81, 0x0) 00:46:38 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000040601"], 0x58}}, 0x0) [ 429.116193][ T7461] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. 00:46:38 executing program 1: r0 = syz_usbip_server_init(0x3) write$usbip_server(r0, &(0x7f0000000000)=@ret_unlink={{0x4, 0x0, 0x0, 0x0, 0xffff1d1f}}, 0x30) socket$l2tp6(0xa, 0x2, 0x73) 00:46:38 executing program 3: sigaltstack(&(0x7f00000011c0)={0x0}, 0x0) 00:46:38 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:46:38 executing program 2: sigaltstack(&(0x7f00000011c0)={0x0, 0x3}, 0x0) 00:46:38 executing program 3: openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_root(0xffffff9c, &(0x7f0000001640)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000001580)={0xc0244000, &(0x7f00000014c0), &(0x7f0000000040), &(0x7f0000000000), {0x5}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f00000000c0)=""/189, &(0x7f0000001500)=[0x0], 0x1}, 0x58) [ 429.181275][ T7468] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) 00:46:38 executing program 0: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x29}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000600)={0xc, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @string={0x4, 0x3, "42d1"}}}, 0x0) [ 429.190841][ T7468] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) 00:46:38 executing program 2: r0 = getpgrp(0xffffffffffffffff) syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0], 0x1}, 0x58) [ 429.203332][ T7468] vhci_hcd vhci_hcd.0: Device attached [ 429.210386][ T7469] vhci_hcd: cannot find the pending unlink 0 [ 429.214188][ T7469] vhci_hcd: connection closed [ 429.214968][ T11] vhci_hcd: stop threads 00:46:38 executing program 2: openat$thread_pidfd(0xffffff9c, &(0x7f00000001c0), 0x323802, 0x0) [ 429.216913][ T38] audit: type=1400 audit(1667177198.404:257): avc: denied { checkpoint_restore } for pid=7476 comm="syz-executor.2" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 429.218448][ T11] vhci_hcd: release socket [ 429.236695][ T11] vhci_hcd: disconnect device [ 429.498219][ T3735] usb 5-1: new high-speed USB device number 8 using dummy_hcd 00:46:38 executing program 1: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000100)) 00:46:38 executing program 2: io_setup(0x4, &(0x7f0000000040)=0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) io_submit(r0, 0x1, &(0x7f00000007c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 00:46:38 executing program 3: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x401c5820, 0x0) 00:46:38 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) 00:46:38 executing program 1: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) fstat(r0, &(0x7f0000000040)) [ 429.868584][ T3735] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 430.017884][ T7401] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 430.059322][ T3735] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 430.065269][ T3735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.080250][ T3735] usb 5-1: Product: syz [ 430.083922][ T3735] usb 5-1: Manufacturer: syz [ 430.088109][ T3735] usb 5-1: SerialNumber: syz [ 430.377238][ T3735] usb 5-1: USB disconnect, device number 8 [ 430.457851][ T7401] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 430.617902][ T7401] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 430.624819][ T7401] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.631184][ T7401] usb 8-1: Product: syz [ 430.634475][ T7401] usb 8-1: Manufacturer: syz [ 430.637912][ T7401] usb 8-1: SerialNumber: syz 00:46:40 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) 00:46:40 executing program 0: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x5450, 0x0) 00:46:40 executing program 2: setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0xfffffffffffffe95) 00:46:40 executing program 2: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 00:46:40 executing program 1: syz_clone3(&(0x7f0000000b40)={0x200000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:40 executing program 2: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2, 0x0) [ 430.880014][ T3785] usb 8-1: USB disconnect, device number 9 [ 431.419507][ C2] hpet: Lost 3 RTC interrupts 00:46:40 executing program 0: syz_clone3(&(0x7f0000000300)={0x3000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:46:40 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) semget$private(0x2, 0x3, 0x10) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 00:46:40 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x2}]}}) 00:46:40 executing program 1: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x5460, 0x0) 00:46:40 executing program 1: r0 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000980), 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x13, r0, 0x0) 00:46:40 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000001640)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = syz_clone3(&(0x7f00000012c0)={0x80, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f0000001280)=0x0, &(0x7f0000001240), {0x28}, &(0x7f0000001680)=""/181, 0xb5, &(0x7f0000001340)=""/193, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001440)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000001480), 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001600), 0x2, 0x0) r6 = getpgrp(r2) syz_clone3(&(0x7f0000001580)={0xc0244000, &(0x7f00000014c0), &(0x7f0000000040), &(0x7f0000000000), {0x5}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f00000000c0)=""/189, &(0x7f0000001500)=[r6, r4], 0x2}, 0x58) 00:46:40 executing program 0: futex_waitv(&(0x7f0000001ec0)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000002a00)={0x0, 0x3938700}, 0x0) [ 431.455161][ T38] audit: type=1400 audit(1667177200.644:258): avc: denied { execute } for pid=7511 comm="syz-executor.1" path="/dev/ubi_ctrl" dev="devtmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 00:46:40 executing program 0: mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) 00:46:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="b8010000010301"], 0x1b8}}, 0x0) [ 431.520528][ T7520] netlink: 420 bytes leftover after parsing attributes in process `syz-executor.0'. [ 431.717713][ T173] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 431.718156][ T3785] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 432.178229][ T173] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 432.258679][ T3785] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 432.265341][ T3785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.271200][ T3785] usb 7-1: Product: syz [ 432.274503][ T3785] usb 7-1: Manufacturer: syz [ 432.278594][ T3785] usb 7-1: SerialNumber: syz [ 432.319022][ T3785] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 432.387786][ T173] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 432.393950][ T173] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.399838][ T173] usb 8-1: Product: syz [ 432.403596][ T173] usb 8-1: Manufacturer: syz [ 432.406664][ T173] usb 8-1: SerialNumber: syz [ 432.649869][ T173] usb 8-1: USB disconnect, device number 10 [ 432.756686][ C2] hpet: Lost 2 RTC interrupts [ 432.917803][ T3785] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 433.122650][ T3740] usb 7-1: USB disconnect, device number 3 00:46:42 executing program 2: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000001640)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = syz_clone3(&(0x7f00000012c0)={0x80, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f0000001280)=0x0, &(0x7f0000001240), {0x28}, &(0x7f0000001680)=""/181, 0xb5, &(0x7f0000001340)=""/193, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, {r1}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001440)={{0x1, 0x1, 0x18, r0, {r3}}, './file0\x00'}) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f0000001480), 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001600), 0x2, 0x0) r6 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000001540), 0x9c000, 0x0) r7 = getpgrp(r2) syz_clone3(&(0x7f0000001580)={0xc0244000, &(0x7f00000014c0), &(0x7f0000000040), &(0x7f0000000000), {0x5}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f00000000c0)=""/189, &(0x7f0000001500)=[r7, r4], 0x2, {r6}}, 0x58) 00:46:42 executing program 1: sigaltstack(0x0, &(0x7f0000000040)={0x0}) 00:46:42 executing program 0: io_getevents(0x0, 0xffffffff, 0x0, 0x0, 0x0) sync() 00:46:42 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x2}]}}) 00:46:42 executing program 1: openat$ubi_ctrl(0xffffff9c, &(0x7f0000001540), 0x9c000, 0x0) 00:46:42 executing program 0: io_setup(0x6, &(0x7f0000000480)=0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 00:46:42 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x8000, 0x4) 00:46:42 executing program 1: dup(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x4080, 0x0) preadv(r0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/200, 0x1db000}], 0x3, 0x0, 0x0) [ 433.692366][ T38] audit: type=1400 audit(1667177202.884:259): avc: denied { setopt } for pid=7533 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 00:46:42 executing program 2: r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter\x00') read$rfkill(r1, &(0x7f0000000040), 0xfffffeac) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x68831, 0xffffffffffffffff, 0x5000000) 00:46:42 executing program 1: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x10, 0x800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x28, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff], 0x7, 0x0, 0x1}, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter\x00') read$rfkill(r3, &(0x7f0000000040), 0xfffffeac) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000140)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40d0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) read$rfkill(r3, &(0x7f00000002c0), 0x8) [ 433.763415][ T38] audit: type=1400 audit(1667177202.954:260): avc: denied { execute } for pid=7537 comm="syz-executor.2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=45598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 00:46:43 executing program 1: openat$damon_schemes(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000380), 0x0, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x10, 0x800) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x28, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff], 0x7, 0x0, 0x1}, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter\x00') read$rfkill(r3, &(0x7f0000000040), 0xfffffeac) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000140)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40d0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) read$rfkill(r3, &(0x7f00000002c0), 0x8) [ 433.922098][ C2] hpet: Lost 3 RTC interrupts [ 433.929780][ T3735] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 433.937835][ T3785] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 433.944293][ T3785] ath9k_htc: Failed to initialize the device [ 433.950260][ T3740] usb 7-1: ath9k_htc: USB layer deinitialized [ 434.388005][ T3735] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 434.569360][ T3735] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 434.575528][ T3735] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.583066][ T3735] usb 8-1: Product: syz [ 434.587333][ T3735] usb 8-1: Manufacturer: syz [ 434.594600][ T3735] usb 8-1: SerialNumber: syz [ 434.836515][ T3735] usb 8-1: USB disconnect, device number 11 00:46:44 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000b, 0x31, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f0000024000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000900)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/200, 0x1db000}], 0x3, 0x0, 0x0) 00:46:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) read$rfkill(r2, &(0x7f0000000040), 0xfffffeac) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x68831, 0xffffffffffffffff, 0x0) 00:46:44 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) 00:46:44 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) 00:46:44 executing program 1: rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x1, 0x6, 0x0, &(0x7f00000000c0), 0x0, 0x0) [ 435.383226][ T7547] ------------[ cut here ]------------ [ 435.388086][ T7547] WARNING: CPU: 3 PID: 7547 at include/linux/gfp.h:221 alloc_charge_hpage+0x802/0xaa0 [ 435.393010][ T38] audit: type=1400 audit(1667177204.584:261): avc: denied { write } for pid=7545 comm="syz-executor.2" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 435.393266][ T7550] random: crng reseeded on system resumption [ 435.395455][ T7547] Modules linked in: [ 435.421135][ T7547] [ 435.421277][ T7547] CPU: 3 PID: 7547 Comm: syz-executor.3 Not tainted 6.1.0-rc2-syzkaller-00107-g200204f56f3b #0 [ 435.421425][ T7547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 435.421462][ T7547] RIP: 0010:alloc_charge_hpage+0x802/0xaa0 [ 435.421551][ T7547] Code: e5 01 4c 89 ee e8 0e b6 af ff 4d 85 ed 0f 84 28 fc ff ff e8 10 b9 af ff 48 8d 6b ff 4c 8d 63 07 e9 16 fc ff ff e8 fe b8 af ff <0f> 0b e9 96 fa ff ff 41 bc 1a 00 00 00 e9 86 fd ff ff e8 e7 b8 af [ 435.421575][ T7547] RSP: 0018:ffffc90006e377d8 EFLAGS: 00010216 00:46:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5ac, 0x223, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 435.422494][ T38] audit: type=1400 audit(1667177204.584:262): avc: denied { open } for pid=7545 comm="syz-executor.2" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 435.423757][ T7551] mmap: syz-executor.3 (7551) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. 00:46:44 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x3, 0x1, 0x0, "68708176ee5f3651f9cba0afc0420d7a88dc84995ce234470527e22cd3d0d078"}) [ 435.503981][ T7547] RAX: 00000000000089be RBX: 0000000000000000 RCX: ffffc900242b5000 [ 435.512883][ T7547] RDX: 0000000000040000 RSI: ffffffff81cc0b72 RDI: 0000000000000001 [ 435.523855][ T7547] RBP: ffff88801ad1c00c R08: 0000000000000001 R09: 0000000000000000 [ 435.533312][ T7547] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 435.540950][ T7547] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.546107][ T38] audit: type=1400 audit(1667177204.734:263): avc: denied { read write } for pid=7558 comm="syz-executor.1" name="video3" dev="devtmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 00:46:44 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0xa, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 435.548114][ T7547] FS: 00007fd4c27ab700(0000) GS:ffff88802cb00000(0000) knlGS:0000000000000000 [ 435.579163][ T38] audit: type=1400 audit(1667177204.734:264): avc: denied { open } for pid=7558 comm="syz-executor.1" path="/dev/video3" dev="devtmpfs" ino=880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 435.583048][ T7547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 435.601959][ T38] audit: type=1400 audit(1667177204.744:265): avc: denied { ioctl } for pid=7558 comm="syz-executor.1" path="/dev/video3" dev="devtmpfs" ino=880 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 435.621047][ T7547] CR2: 00007f3360fad988 CR3: 000000004b550000 CR4: 0000000000150ee0 [ 435.634350][ T7547] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 435.642961][ T7547] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 435.649050][ T7547] Call Trace: [ 435.651712][ T7547] [ 435.654341][ T7547] collapse_file+0x1ca/0x5780 [ 435.659456][ T7547] ? hpage_collapse_scan_pmd+0x1e30/0x1e30 [ 435.665038][ T7547] ? xas_descend+0x146/0x440 [ 435.670072][ T7547] ? rcu_read_lock_sched_held+0xd/0x70 [ 435.673942][ T7547] ? hpage_collapse_scan_file+0x289/0x17a0 [ 435.678364][ T7547] ? xas_find+0x2fe/0x7d0 [ 435.682013][ T7547] hpage_collapse_scan_file+0xd6c/0x17a0 [ 435.685785][ T7547] ? rcu_read_lock_sched_held+0xd/0x70 [ 435.689360][ T7547] ? collapse_file+0x5780/0x5780 [ 435.692614][ T7547] madvise_collapse+0x53a/0xb40 [ 435.696031][ T7547] ? khugepaged_min_free_kbytes_update+0x90/0x90 [ 435.702190][ T7547] ? mas_prev_nentry+0x65b/0x12b0 [ 435.706537][ T7547] madvise_vma_behavior+0xd0a/0x1cc0 [ 435.711786][ T7547] ? mas_prev+0x153/0x650 [ 435.715731][ T7547] ? madvise_vma_anon_name+0xc0/0xc0 [ 435.721407][ T7547] ? mas_walk+0x48a/0x670 [ 435.725030][ T7547] ? find_vma_prev+0xe0/0x160 [ 435.729925][ T7547] ? vm_unmapped_area+0x760/0x760 [ 435.738058][ T7547] ? kmem_cache_free+0x260/0x4b0 [ 435.742912][ T7547] madvise_walk_vmas+0x1c7/0x2b0 [ 435.749043][ T7547] ? madvise_vma_anon_name+0xc0/0xc0 [ 435.752977][ T7547] ? __remove_memory+0x40/0x40 [ 435.756592][ T7547] ? madvise_vma_anon_name+0xc0/0xc0 [ 435.761884][ T7547] do_madvise.part.0+0x24a/0x340 [ 435.766255][ T7547] ? madvise_cold+0x2f0/0x2f0 [ 435.772135][ T7547] ? restore_fpregs_from_fpstate+0xbd/0x1c0 [ 435.779879][ T7547] ? vtime_user_exit+0x218/0x6c0 [ 435.783716][ T7547] __x64_sys_madvise+0x113/0x150 [ 435.787456][ T7547] do_syscall_64+0x35/0xb0 [ 435.791388][ T7547] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 435.795838][ T7547] RIP: 0033:0x7fd4c1a8b5a9 [ 435.797774][ T173] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 435.799490][ T7547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 435.819121][ T7547] RSP: 002b:00007fd4c27ab168 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 435.825213][ T7547] RAX: ffffffffffffffda RBX: 00007fd4c1babf80 RCX: 00007fd4c1a8b5a9 [ 435.830830][ T7547] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000000020000000 [ 435.836030][ T7547] RBP: 00007fd4c1ae67b0 R08: 0000000000000000 R09: 0000000000000000 [ 435.842076][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.847766][ T7547] R13: 00007ffd37a28a8f R14: 00007fd4c27ab300 R15: 0000000000022000 [ 435.853475][ T7547] [ 435.855945][ T7547] Kernel panic - not syncing: panic_on_warn set ... [ 435.861234][ T7547] CPU: 3 PID: 7547 Comm: syz-executor.3 Not tainted 6.1.0-rc2-syzkaller-00107-g200204f56f3b #0 [ 435.871093][ T7547] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 435.879399][ T7547] Call Trace: [ 435.882667][ T7547] [ 435.885775][ T7547] dump_stack_lvl+0xcd/0x134 [ 435.890548][ T7547] panic+0x2c8/0x622 [ 435.894397][ T7547] ? panic_print_sys_info.part.0+0x110/0x110 [ 435.898530][ T7547] ? __warn.cold+0x24b/0x350 [ 435.901639][ T7547] ? alloc_charge_hpage+0x802/0xaa0 [ 435.904881][ T7547] __warn.cold+0x25c/0x350 [ 435.907797][ T7547] ? alloc_charge_hpage+0x802/0xaa0 [ 435.911317][ T7547] report_bug+0x1bc/0x210 [ 435.914172][ T7547] handle_bug+0x3c/0x70 [ 435.916903][ T7547] exc_invalid_op+0x14/0x40 [ 435.920210][ T7547] asm_exc_invalid_op+0x16/0x20 [ 435.923395][ T7547] RIP: 0010:alloc_charge_hpage+0x802/0xaa0 [ 435.927166][ T7547] Code: e5 01 4c 89 ee e8 0e b6 af ff 4d 85 ed 0f 84 28 fc ff ff e8 10 b9 af ff 48 8d 6b ff 4c 8d 63 07 e9 16 fc ff ff e8 fe b8 af ff <0f> 0b e9 96 fa ff ff 41 bc 1a 00 00 00 e9 86 fd ff ff e8 e7 b8 af [ 435.938856][ T7547] RSP: 0018:ffffc90006e377d8 EFLAGS: 00010216 [ 435.942582][ T7547] RAX: 00000000000089be RBX: 0000000000000000 RCX: ffffc900242b5000 [ 435.947817][ T7547] RDX: 0000000000040000 RSI: ffffffff81cc0b72 RDI: 0000000000000001 [ 435.952906][ T7547] RBP: ffff88801ad1c00c R08: 0000000000000001 R09: 0000000000000000 [ 435.958801][ T7547] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 435.964960][ T7547] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.970564][ T7547] ? alloc_charge_hpage+0x802/0xaa0 [ 435.975392][ T7547] ? alloc_charge_hpage+0x802/0xaa0 [ 435.979769][ T7547] collapse_file+0x1ca/0x5780 [ 435.983218][ T7547] ? hpage_collapse_scan_pmd+0x1e30/0x1e30 [ 435.987294][ T7547] ? xas_descend+0x146/0x440 [ 435.990806][ T7547] ? rcu_read_lock_sched_held+0xd/0x70 [ 435.994535][ T7547] ? hpage_collapse_scan_file+0x289/0x17a0 [ 435.998267][ T7547] ? xas_find+0x2fe/0x7d0 [ 436.001130][ T7547] hpage_collapse_scan_file+0xd6c/0x17a0 [ 436.005030][ T7547] ? rcu_read_lock_sched_held+0xd/0x70 [ 436.008963][ T7547] ? collapse_file+0x5780/0x5780 [ 436.013798][ T7547] madvise_collapse+0x53a/0xb40 [ 436.017349][ T7547] ? khugepaged_min_free_kbytes_update+0x90/0x90 [ 436.021927][ T7547] ? mas_prev_nentry+0x65b/0x12b0 [ 436.025506][ T7547] madvise_vma_behavior+0xd0a/0x1cc0 [ 436.029611][ T7547] ? mas_prev+0x153/0x650 [ 436.033313][ T7547] ? madvise_vma_anon_name+0xc0/0xc0 [ 436.036965][ T7547] ? mas_walk+0x48a/0x670 [ 436.040365][ T7547] ? find_vma_prev+0xe0/0x160 [ 436.043734][ T7547] ? vm_unmapped_area+0x760/0x760 [ 436.047335][ T7547] ? kmem_cache_free+0x260/0x4b0 [ 436.050651][ T7547] madvise_walk_vmas+0x1c7/0x2b0 [ 436.053969][ T7547] ? madvise_vma_anon_name+0xc0/0xc0 [ 436.057420][ T7547] ? __remove_memory+0x40/0x40 [ 436.060957][ T7547] ? madvise_vma_anon_name+0xc0/0xc0 [ 436.065717][ T7547] do_madvise.part.0+0x24a/0x340 [ 436.070082][ T7547] ? madvise_cold+0x2f0/0x2f0 [ 436.073953][ T7547] ? restore_fpregs_from_fpstate+0xbd/0x1c0 [ 436.079319][ T7547] ? vtime_user_exit+0x218/0x6c0 [ 436.083909][ T7547] __x64_sys_madvise+0x113/0x150 [ 436.088157][ T7547] do_syscall_64+0x35/0xb0 [ 436.092083][ T7547] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 436.097006][ T7547] RIP: 0033:0x7fd4c1a8b5a9 [ 436.101208][ T7547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 436.116762][ T7547] RSP: 002b:00007fd4c27ab168 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 436.123298][ T7547] RAX: ffffffffffffffda RBX: 00007fd4c1babf80 RCX: 00007fd4c1a8b5a9 [ 436.128800][ T7547] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000000020000000 [ 436.134485][ T7547] RBP: 00007fd4c1ae67b0 R08: 0000000000000000 R09: 0000000000000000 [ 436.139982][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.145199][ T7547] R13: 00007ffd37a28a8f R14: 00007fd4c27ab300 R15: 0000000000022000 [ 436.150622][ T7547] [ 436.154032][ T7547] Kernel Offset: disabled [ 436.157101][ T7547] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:46:45 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff8bcbc9c0 RCX=ffffffff898e3d75 RDX=ffffed100590698a RSI=0000000000000000 RDI=ffffffff89915c8f RBP=dffffc0000000000 RSP=ffffffff8bc07e10 R8 =0000000000000000 R9 =ffff88802c834c4b R10=ffffed1005906989 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff8de16c50 R15=0000000000000000 RIP=ffffffff8991537b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002003d000 CR3=0000000023708000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84632ed1 RDI=ffffffff914cf720 RBP=ffffffff914cf6e0 RSP=ffffc90000867900 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=74203a7469647561 R12=0000000000000000 R13=000000000000006e R14=ffffffff84632e70 R15=0000000000000000 RIP=ffffffff84632efb RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2e021000 CR3=000000005be3f000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000007 RBX=1ffff92000dcaec4 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff8880459563ec RBP=ffff8880459563e8 RSP=ffffc90006e57618 R8 =0000000000000000 R9 =ffffffff8de16c57 R10=fffffbfff1bc2d8a R11=0000000000000001 R12=0000000000000212 R13=ffff888045956008 R14=ffffffff849966c0 R15=ffffffff914df210 RIP=ffffffff815f4082 RFL=00010046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f3361c80700 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbaaaad53be CR3=000000004e4e2000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=6772c0432d563fb90762d37a1c3d32ab XMM01=dcd87dfff81002411b74fcb910f4e044 XMM02=3721ab116cec57a4e1fe6f43c510ffcc XMM03=57638e70397789c132519e55e0e135b3 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000022dc726f XMM08=a20000007400000062000000b6000000 XMM09=00000000000000000000000000000000 XMM10=145b939e158f54e4f7207f4359833382 XMM11=28997a30b534efc64a7d454847c4dde6 XMM12=0d0c0f0e09080b0a0504070601000302 XMM13=0c0f0e0d080b0a090407060500030201 XMM14=00000000ffffffff0000000000000068 XMM15=00000000000000000000000000000028 info registers vcpu 3 RAX=0000000000040000 RBX=0000000000000001 RCX=ffffc900242b5000 RDX=0000000000040000 RSI=ffffffff816133b2 RDI=0000000000000001 RBP=ffffc90006e374c8 RSP=ffffc90006e37490 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000012 R13=ffff888013938240 R14=0000000000000200 R15=ffffc90006e37518 RIP=ffffffff816133b4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd4c27ab700 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555556069708 CR3=000000004b550000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000