ocket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 386.738976][ T29] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 175 [ 386.747087][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 386.839206][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.846393][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 386.851905][ T29] usb 7-1: SerialNumber: syz 17:37:09 executing program 0: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x44400, 0x0) [ 386.902358][ T29] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 387.114267][ T29] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 387.136612][ T29] usb 7-1: USB disconnect, device number 4 17:37:09 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) ftruncate(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000019100)=0x3, 0x4) 17:37:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:09 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="181000000000000000005278c1a40000000000000000000095"], &(0x7f0000000800)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000240)={@remote, @private=0xa010100}, 0xc) 17:37:09 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 17:37:09 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000002240)) 17:37:09 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:10 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) ftruncate(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:10 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 17:37:10 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, 0x0) 17:37:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:10 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, 0x0) 17:37:10 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0xac882, 0x0) 17:37:10 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x511000) [ 388.376372][ T39] audit: type=1400 audit(1659202630.632:333): avc: denied { write } for pid=9848 comm="syz-executor.0" name="renderD128" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 17:37:10 executing program 0: syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000000, 0x0) 17:37:11 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) ftruncate(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 17:37:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x0, 0x0, 0x4}) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000140)={0x1}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000600)={@desc={0x1, 0x0, @desc1}}) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000780)='.pending_reads\x00', 0x800, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000800)) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 17:37:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x0, 0x0, 0x4}) write$6lowpan_enable(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000140)={0x1}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000600)={@desc={0x1, 0x0, @desc1}}) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000780)='.pending_reads\x00', 0x800, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000800)) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r2, r2}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 17:37:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, 0x0, &(0x7f00000002c0)) 17:37:11 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x4, &(0x7f0000000780)=@framed={{}, [@call]}, &(0x7f0000000800)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:11 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x1, &(0x7f00000013c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000140)=""/4096, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:12 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) ftruncate(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:12 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) accept$inet(r0, 0x0, 0x0) 17:37:12 executing program 0: bpf$PROG_LOAD_XDP(0x18, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:12 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) 17:37:12 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 17:37:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x103646, 0x0) write$rfkill(r0, &(0x7f0000000000), 0x8) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 17:37:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 17:37:13 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) ftruncate(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:13 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x1c, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 17:37:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:13 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x80) 17:37:13 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="e5000000000035dc258a8dc8"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:13 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000100)) 17:37:13 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x1, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:13 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) ftruncate(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:13 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0) 17:37:13 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="19000000000000000000000000000000000000000000000095"], &(0x7f0000000800)='GPL\x00', 0x5, 0xf7, &(0x7f0000000200)=""/247, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @private}, 0xc) 17:37:14 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="a5cc9c6f3d68c600eb66f31da98ad661", 0x10) 17:37:14 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="a5cc9c6f3d68c600eb66f31da98ad661", 0x10) 17:37:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @private}, 0xc) 17:37:14 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) ftruncate(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:14 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="a5cc9c6f3d68c600eb66f31da98ad661", 0x10) 17:37:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @private}, 0xc) 17:37:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @private}, 0xc) 17:37:14 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="a5cc9c6f3d68c600eb66f31da98ad661", 0x10) 17:37:14 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) 17:37:14 executing program 2: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @private}, 0xc) 17:37:17 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) ftruncate(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:17 executing program 0: r0 = epoll_create(0xd5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x4000000c}) 17:37:17 executing program 2: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @private}, 0xc) 17:37:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:17 executing program 2: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @private}, 0xc) 17:37:17 executing program 0: r0 = epoll_create(0xd5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x4000000c}) 17:37:17 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @private}, 0xc) 17:37:17 executing program 0: r0 = epoll_create(0xd5) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x4000000c}) 17:37:20 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) ftruncate(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:20 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @private}, 0xc) 17:37:20 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0x4000000c}) 17:37:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:20 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0x4000000c}) 17:37:20 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @private}, 0xc) 17:37:20 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0x4000000c}) 17:37:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000001c0)={@multicast2, @private}, 0xc) 17:37:23 executing program 0: r0 = epoll_create(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) 17:37:23 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000001c0)={@multicast2, @private}, 0xc) 17:37:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:23 executing program 0: r0 = epoll_create(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) 17:37:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000001c0)={@multicast2, @private}, 0xc) 17:37:23 executing program 0: r0 = epoll_create(0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) 17:37:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 17:37:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 17:37:24 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:24 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) 17:37:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) 17:37:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:24 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) 17:37:24 executing program 2: r0 = epoll_create(0x3fd) epoll_pwait2(r0, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) 17:37:24 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) 17:37:24 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) 17:37:27 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) 17:37:27 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:27 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 17:37:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000f40)=@deltfilter={0xec4, 0x2d, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0xe8c, 0x2, [@TCA_CGROUP_ACT={0xe88, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x5, 0x6, '$'}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xec4}}, 0x0) [ 405.541382][ T39] audit: type=1400 audit(1659202647.802:334): avc: denied { setopt } for pid=10016 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 17:37:27 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) 17:37:27 executing program 2: r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x2, 0x40000031, r0, 0x0) 17:37:27 executing program 0: epoll_create(0xd5) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0x4000000c}) 17:37:27 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x1, &(0x7f00000013c0)=ANY=[@ANYBLOB='5'], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000140)=""/4096, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:30 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:30 executing program 0: epoll_create(0xd5) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0x4000000c}) 17:37:30 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000001789f3f2c0d17c330095"], &(0x7f0000000800)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:30 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:30 executing program 0: epoll_create(0xd5) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)={0x4000000c}) 17:37:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 17:37:30 executing program 0: r0 = epoll_create(0xd5) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x4000000c}) 17:37:30 executing program 0: r0 = epoll_create(0xd5) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x4000000c}) 17:37:33 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:33 executing program 0: r0 = epoll_create(0xd5) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x4000000c}) 17:37:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid=r5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0xa99, 0x4, 0x1, 0x0, 0x5, 0x800, 0xfffffffffffffff7, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x7f, 0x0, 0x3, 0x5, 0x9, 0x1, 0x8e77, 0x2, 0x3, 0x1, 0x0, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x641, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x1, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x80000000, 0x9, 0x7, 0x7, 0xff, 0xfe4, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x4, 0x7fffffffffffffff, 0x80000000, 0x1, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x5fb4, 0x7, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x7, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x5, 0x1ff, 0x331, 0x7, 0x3f, 0x2, 0x80000000, 0x4, 0x5b9432d6, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x0, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:33 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 17:37:33 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:33 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 17:37:33 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:33 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 17:37:33 executing program 1: pipe2(0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid=r5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0xa99, 0x4, 0x1, 0x0, 0x5, 0x800, 0xfffffffffffffff7, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x7f, 0x0, 0x3, 0x5, 0x9, 0x1, 0x8e77, 0x2, 0x3, 0x1, 0x0, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x641, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x1, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x80000000, 0x9, 0x7, 0x7, 0xff, 0xfe4, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x4, 0x7fffffffffffffff, 0x80000000, 0x1, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x5fb4, 0x7, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x7, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x5, 0x1ff, 0x331, 0x7, 0x3f, 0x2, 0x80000000, 0x4, 0x5b9432d6, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x0, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:34 executing program 0: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) 17:37:34 executing program 1: pipe2(0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:34 executing program 1: pipe2(0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid=r5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0xa99, 0x4, 0x1, 0x0, 0x5, 0x800, 0xfffffffffffffff7, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x7f, 0x0, 0x3, 0x5, 0x9, 0x1, 0x8e77, 0x2, 0x3, 0x1, 0x0, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x641, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x1, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x80000000, 0x9, 0x7, 0x7, 0xff, 0xfe4, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x4, 0x7fffffffffffffff, 0x80000000, 0x1, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x5fb4, 0x7, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x7, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x5, 0x1ff, 0x331, 0x7, 0x3f, 0x2, 0x80000000, 0x4, 0x5b9432d6, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x0, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:34 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:34 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid=r5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0xa99, 0x4, 0x1, 0x0, 0x5, 0x800, 0xfffffffffffffff7, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x7f, 0x0, 0x3, 0x5, 0x9, 0x1, 0x8e77, 0x2, 0x3, 0x1, 0x0, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x641, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x1, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x80000000, 0x9, 0x7, 0x7, 0xff, 0xfe4, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x4, 0x7fffffffffffffff, 0x80000000, 0x1, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x5fb4, 0x7, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x7, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x5, 0x1ff, 0x331, 0x7, 0x3f, 0x2, 0x80000000, 0x4, 0x5b9432d6, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x0, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:35 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid=r5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0xa99, 0x4, 0x1, 0x0, 0x5, 0x800, 0xfffffffffffffff7, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x7f, 0x0, 0x3, 0x5, 0x9, 0x1, 0x8e77, 0x2, 0x3, 0x1, 0x0, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x641, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x1, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x80000000, 0x9, 0x7, 0x7, 0xff, 0xfe4, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x4, 0x7fffffffffffffff, 0x80000000, 0x1, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x5fb4, 0x7, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x7, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x5, 0x1ff, 0x331, 0x7, 0x3f, 0x2, 0x80000000, 0x4, 0x5b9432d6, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x0, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:35 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid=r5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0xa99, 0x4, 0x1, 0x0, 0x5, 0x800, 0xfffffffffffffff7, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x7f, 0x0, 0x3, 0x5, 0x9, 0x1, 0x8e77, 0x2, 0x3, 0x1, 0x0, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x641, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x1, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x80000000, 0x9, 0x7, 0x7, 0xff, 0xfe4, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x4, 0x7fffffffffffffff, 0x80000000, 0x1, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x5fb4, 0x7, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x7, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x5, 0x1ff, 0x331, 0x7, 0x3f, 0x2, 0x80000000, 0x4, 0x5b9432d6, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x0, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:36 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid=r5}) 17:37:36 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid=r5}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0xa99, 0x4, 0x1, 0x0, 0x5, 0x800, 0xfffffffffffffff7, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x7f, 0x0, 0x3, 0x5, 0x9, 0x1, 0x8e77, 0x2, 0x3, 0x1, 0x0, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x641, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x1, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x80000000, 0x9, 0x7, 0x7, 0xff, 0xfe4, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x4, 0x7fffffffffffffff, 0x80000000, 0x1, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x5fb4, 0x7, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x7, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x5, 0x1ff, 0x331, 0x7, 0x3f, 0x2, 0x80000000, 0x4, 0x5b9432d6, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x0, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:36 executing program 0: bpf$PROG_LOAD_XDP(0x23, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:36 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f0000000040)='GPL\x00', 0x1, 0xf5, &(0x7f0000000080)=""/245, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:36 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000200)=[{&(0x7f0000000c40)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/239, 0x7ffff000}], 0x1, 0x0) 17:37:38 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:38 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000040)=@raw=[@map_val, @exit], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:38 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 17:37:38 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:38 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='GPL\x00', 0x2, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:38 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='GPL\x00', 0x2, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:37:38 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xffffffffffffffe7) 17:37:38 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x20000000000000, 0x20d43) 17:37:41 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x204, 0xffffffffffffffff, 0x115}, 0x48) 17:37:41 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 17:37:41 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:41 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:44 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:37:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:47 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:47 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:37:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:50 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:50 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:37:50 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:53 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:53 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:37:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:53 executing program 0: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)) 17:37:53 executing program 0: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)) 17:37:53 executing program 0: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)) 17:37:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:56 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:37:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:56 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:59 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:37:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:59 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/71, 0x47}, {0x0}, {0x0}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000540)=""/226, 0xe2}], 0x5, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:37:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:37:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:37:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:02 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:02 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:02 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:03 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:03 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:03 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:04 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:04 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:04 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:05 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:05 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:06 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:06 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:06 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:06 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)) 17:38:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:07 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)) 17:38:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:07 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)) 17:38:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, 0x0) 17:38:07 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, 0x0) [ 446.221727][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.226326][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 17:38:08 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:08 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, 0x0) 17:38:08 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:08 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:08 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/162, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af13, &(0x7f0000000000)) 17:38:08 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x5, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:08 executing program 0: bpf$PROG_LOAD_XDP(0x25, 0x0, 0x0) 17:38:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 17:38:09 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:09 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x86}) 17:38:09 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:09 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:09 executing program 0: getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01]) 17:38:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x0, @multicast2, 0x0, 0x0, 'dh\x00'}, {@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x44) [ 447.296480][T10526] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 17:38:09 executing program 0: pipe2(&(0x7f0000001a80)={0xffffffffffffffff}, 0x0) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x0) [ 447.328101][ T39] audit: type=1400 audit(1659202689.582:335): avc: denied { map } for pid=10529 comm="syz-executor.0" path="pipe:[55424]" dev="pipefs" ino=55424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 17:38:09 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='GPL\x00', 0x3, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:10 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:10 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='GPL\x00', 0x3, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:10 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@private, @multicast1}, 0xc) 17:38:10 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:10 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x7, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @map_val, @initr0, @exit], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:10 executing program 0: r0 = msgget(0x2, 0x201) msgctl$IPC_RMID(r0, 0x0) 17:38:11 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:11 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:12 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:12 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:12 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:12 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:13 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:13 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:13 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:13 executing program 1: pipe2(&(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:13 executing program 1: pipe2(&(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:13 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:13 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:13 executing program 1: pipe2(&(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 17:38:14 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, 0x0, 0x0) 17:38:14 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, 0x0, 0x0) 17:38:14 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, 0x0, 0x0) 17:38:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:14 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000), 0x0) 17:38:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 17:38:14 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:14 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000), 0x0) 17:38:14 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000), 0x0) 17:38:14 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 17:38:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:14 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 17:38:15 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 17:38:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 17:38:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="185a00001000000000000000000000000000000000000008000000000000000085100000fbffffff"], &(0x7f0000000800)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:15 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2}, 0x80) 17:38:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private2}}) 17:38:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @private, r1}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @private, r3}, 0xc) 17:38:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 17:38:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x127a46, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) write$rfkill(r0, &(0x7f0000000000), 0x1c00) 17:38:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:15 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) [ 453.652019][ T39] audit: type=1800 audit(1659202695.912:336): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1163 res=0 errno=0 [ 453.671561][ T39] audit: type=1804 audit(1659202695.912:337): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/syzkaller-testdir348574954/syzkaller.Z9NUtJ/803/file0" dev="sda1" ino=1163 res=1 errno=0 17:38:15 executing program 1: syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0xa67b43a1bd2a6851, 0x0) 17:38:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:16 executing program 1: r0 = epoll_create(0x3fd) epoll_pwait2(r0, &(0x7f0000000380)=[{}], 0x1, &(0x7f00000003c0)={0x77359400}, 0x0, 0x0) 17:38:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:16 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0x40086602, 0x0) 17:38:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) [ 454.685314][ T39] audit: type=1400 audit(1659202696.942:338): avc: denied { setattr } for pid=10707 comm="syz-executor.1" path="/dev/dri/renderD128" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 17:38:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:17 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000540)={0x77359400}, 0x10) connect$vsock_stream(r0, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10) 17:38:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:17 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, &(0x7f0000000080)=""/61, 0x3d) 17:38:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:17 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r0, &(0x7f0000000080)=""/61, 0x3d) 17:38:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:17 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:18 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, 0x0, 0x0) 17:38:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:18 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000180)=@un=@abs, 0x80, 0x0}, 0x0) 17:38:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x0, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x0, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x0, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:19 executing program 1: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 17:38:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x0, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x0, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:19 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x9, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:19 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'batadv_slave_0\x00'}) 17:38:19 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x0, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:20 executing program 1: r0 = epoll_create(0x3fd) epoll_pwait(r0, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0) 17:38:20 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:20 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 17:38:20 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:20 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:21 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:21 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:21 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:22 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@exit]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0xf0, &(0x7f0000000000)=""/240, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:22 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:22 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:22 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:22 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000140)={0x1}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 17:38:22 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:23 executing program 1: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) 17:38:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:23 executing program 1: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x4000000c}) 17:38:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:23 executing program 1: syz_io_uring_setup(0x7e96, &(0x7f0000000180)={0x0, 0xa344, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 17:38:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) dup3(r1, r0, 0x0) 17:38:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:23 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:23 executing program 1: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000180)='0', 0x1) 17:38:24 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:24 executing program 1: bpf$PROG_LOAD_XDP(0x15, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:24 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:24 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000280)={@initdev, @initdev}, &(0x7f00000002c0)=0x8) 17:38:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001100)=@broute={'broute\x00', 0x20, 0x5, 0x100e, [], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'xfrm0\x00', 'vxcan1\x00', 'nr0\x00', 'macvtap0\x00', @link_local, [], @remote, [], 0xde, 0x13e, 0x1b6, [@cpu={{'cpu\x00', 0x0, 0x8}}, @statistic={{'statistic\x00', 0x0, 0x18}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @common=@redirect={'redirect\x00', 0x8}], @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "7389fe1a7cc5790118d3ea06b1a8fee15545db9de73b183351e0efee8d0e2431e0f81606807a8e6548d8bb349d43f7f59de0e66fcf2ce5410bcae8058ddc1989"}}}}]}, {0x0, '\x00', 0x1, 0x0, 0x2, [{0x0, 0x0, 0x0, 'veth1_to_hsr\x00', 'batadv0\x00', 'veth0_to_hsr\x00', 'veth0_to_team\x00', @broadcast, [], @dev, [], 0x88e, 0x9f6, 0xa26, [@u32={{'u32\x00', 0x0, 0x7c0}}, @mac={{'mac\x00', 0x0, 0x10}, {{@local}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:systemd_passwd_var_run_t:s0\x00'}}}, @common=@dnat={'dnat\x00', 0x10, {{@local}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}, {0x0, 0x0, 0x0, 'pimreg0\x00', 'ipvlan0\x00', 'pimreg\x00', 'batadv_slave_0\x00', @local, [], @random="8b7a4421b7b3", [], 0x9e, 0x106, 0x156, [@state={{'state\x00', 0x0, 0x8}}], [@common=@mark={'mark\x00', 0x10}, @common=@STANDARD={'\x00', 0x8}], @common=@log={'log\x00', 0x28, {{0x0, "ecc152af55367a2b84c0cb499baf1a95a23e836918c0aebf684a89d85611"}}}}]}, {0x0, '\x00', 0x3}, {0x0, '\x00', 0x3, 0x0, 0x2, [{0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'wg1\x00', 'wg0\x00', 'nr0\x00', @link_local, [], @dev, [], 0x6e, 0xe6, 0x116, [], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "f5d0b90bfad59ad449562885501634408c33dc64a2cc6c467b9ed974758ee0bae8bc64d9c9932c7b22db8b1d51ce31debfc86c0adf0f9e0f672a34d0e6fab25f"}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}, {0x0, 0x0, 0x0, 'veth1\x00', 'macvlan1\x00', 'veth0_to_bond\x00', 'wlan1\x00', @dev, [], @remote, [], 0x6e, 0xb6, 0x106, [], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}], @common=@log={'log\x00', 0x28, {{0x0, "71e06c0fadd851aa9ff288fba74ace84d7c76c9df34fb31f273078772ea4"}}}}]}]}, 0x1086) 17:38:24 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x0, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:25 executing program 1: r0 = epoll_create(0x3fd) epoll_pwait(r0, &(0x7f00000002c0)=[{}], 0x1, 0x0, &(0x7f0000000300)={[0xff]}, 0x8) 17:38:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x0, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:25 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x0, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:25 executing program 1: socket(0x0, 0x100005, 0x0) 17:38:25 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x4, &(0x7f0000000780)=@framed={{}, [@ldst]}, &(0x7f0000000800)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:25 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:26 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) read$dsp(r0, 0x0, 0x0) 17:38:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:26 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x4, &(0x7f0000000780)=@framed={{}, [@kfunc]}, &(0x7f0000000800)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:26 executing program 1: r0 = epoll_create(0xd5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) 17:38:26 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 17:38:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:27 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:27 executing program 1: io_uring_setup(0x7506, &(0x7f0000000080)={0x0, 0x0, 0x16}) 17:38:27 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:27 executing program 1: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000001c0)=0x7ff) 17:38:28 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:28 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:28 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x5, &(0x7f0000000780)=@framed={{}, [@ldst={0x0, 0x0, 0x2}, @call]}, &(0x7f0000000800)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:28 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='veth0_to_batadv\x00', 0x200, 0x200, 0xff}) 17:38:28 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000780)=@framed={{}, [], {0x95, 0x0, 0x0, 0x9fffffff}}, &(0x7f0000000800)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:28 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:28 executing program 1: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) 17:38:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:29 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x4, &(0x7f0000000780)=@framed={{}, [@ldst={0x0, 0x0, 0x2}]}, &(0x7f0000000800)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:29 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:29 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000780)=@framed={{}, [], {0x95, 0x0, 0x0, 0xe8000000}}, &(0x7f0000000800)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgrp(0x0) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:30 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:30 executing program 1: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="3f13fa2c2c2c152c22bb346296920c9d16532b7d3a277d2d2e2c"]) 17:38:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) [ 468.026642][T11019] nfs: Unknown parameter '?ú' 17:38:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x103646, 0x0) write$rfkill(r0, &(0x7f0000000000), 0x8) read$rfkill(r0, &(0x7f00000001c0), 0x8) 17:38:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x103646, 0x0) write$rfkill(r0, &(0x7f0000000000), 0x8) read$rfkill(r0, &(0x7f00000001c0), 0x8) 17:38:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgrp(0x0) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:31 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:31 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x2, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x7}, 0x48) 17:38:31 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000070000e2ff00000095"], &(0x7f0000000800)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:31 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001100)=@broute={'broute\x00', 0x20, 0x5, 0x90, [], 0x0, 0x0, &(0x7f0000000080)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x3}]}, 0x108) 17:38:31 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpgrp(0x0) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:32 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:32 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:32 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:32 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:32 executing program 1: ppoll(&(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) read$FUSE(0xffffffffffffffff, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(0xffffffffffffffff, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:33 executing program 1: ppoll(&(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:33 executing program 1: ppoll(&(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, 0x0, 0x0, 0x42, 0x0) 17:38:33 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, 0x0, 0x0, 0x42, 0x0) 17:38:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, 0x0, 0x0, 0x42, 0x0) 17:38:34 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) read$FUSE(0xffffffffffffffff, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(0xffffffffffffffff, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x0, 0x42, 0x0) 17:38:34 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:34 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x0, 0x42, 0x0) 17:38:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:34 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:34 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800), 0x0, 0x42, 0x0) 17:38:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) read$FUSE(0xffffffffffffffff, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(0xffffffffffffffff, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:35 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) 17:38:35 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) 17:38:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, 0x0, 0x0, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:35 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:35 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) 17:38:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:35 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180), 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, 0x0, 0x0, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:35 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:35 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:35 executing program 2: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fed000/0x1000)=nil, 0x1000, 0x2000007, 0x10, r0, 0x0) 17:38:35 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) [ 473.772486][ T39] audit: type=1400 audit(1659202716.002:339): avc: denied { execute } for pid=11154 comm="syz-executor.2" path="pipe:[57347]" dev="pipefs" ino=57347 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 17:38:36 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) 17:38:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:36 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:36 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 17:38:36 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, 0x0, 0x0, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:37 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, &(0x7f0000000340)={0x0, 0x0, 0x120000}, 0x20) 17:38:37 executing program 2: socket(0x10, 0x2, 0x49ee) 17:38:37 executing program 2: syz_io_uring_setup(0x4df2, &(0x7f0000000e40), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000de5000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000280)) 17:38:37 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0}) 17:38:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:37 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 17:38:37 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x0, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:37 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}}) 17:38:37 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'veth0_macvtap\x00'}) 17:38:38 executing program 2: io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4625225fdfb79e6f}) 17:38:38 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x101400) 17:38:38 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0xf000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 17:38:38 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 17:38:38 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x0, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2122, 0x0, 0x0) 17:38:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:39 executing program 2: syz_open_dev$sndpcmp(&(0x7f00000013c0), 0x0, 0x4d0102) 17:38:39 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000780)=@framed, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x80) 17:38:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup2(r1, r0) 17:38:39 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000080)='veth0_to_batadv\x00', 0x200, 0x200, 0xff}) 17:38:39 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:39 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x0, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:40 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) 17:38:40 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) accept$phonet_pipe(r0, 0x0, 0x0) [ 477.920942][ T39] audit: type=1400 audit(1659202720.182:340): avc: denied { accept } for pid=11230 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 17:38:40 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0), 0x0, 0x100) [ 478.249457][T11237] process 'syz-executor.1' launched '/dev/fd/-1/./bus' with NULL argv: empty string added 17:38:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:40 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:41 executing program 2: open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 17:38:41 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x117) 17:38:41 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@exit, @jmp]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xb7, &(0x7f0000000100)=""/183, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:41 executing program 2: prlimit64(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) shutdown(r0, 0x0) 17:38:41 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:42 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0), 0x0, 0x100) 17:38:42 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:43 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:44 executing program 2: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x1b, "", {{{0x9, 0x5, 0x1, 0x2, 0x48, 0xab, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x5, 0x9}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x5, 0x1f, 0x9, 0x20, 0xf0}, 0x27, &(0x7f00000000c0)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "0c7ad64f3839255dc5e35efbc97e8b52"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x83, 0x9, 0x85, 0x519, 0x64}]}, 0xa, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x820}}, {0x88, &(0x7f0000000140)=@string={0x88, 0x3, "94c2eb0ba8a4271cf1b7fcc212f05b13edca552b315a585f7cdb533c22932ce5ee5f18999a5f96a22be7a76867f1eb4c5a6eced98e2d44d44aeab1ea5662f6a0f4e13cf69a32cf3f477459bd3ac36d04000d8b91fd35924d8a122936135b9d7624eef9270625f46f694dfa6ab3f61ad4385132442e4449606b93725b634c760f43565fdde710"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x430}}, {0xdc, &(0x7f0000000340)=@string={0xdc, 0x3, "4106fc18aee7baee20b6f2a9d61753a0bff5fb85807a55b9be05a0225436e9b1910db49bb3f50941a6f957e672dbb0ad77e36820d8c86f0d6912ca06c008a5bc6684724b0f731bba3b058509f7da912a6d345e0f827e213220aeee8d73b4c6ae48eba1a8b939592ed635bfc5db09de66ca00e816a0d92e80a4e7450919d03798b876df88f18169506aee46d544d3915306384a084c9bf2b85476d4790a84acfcf47b2e558d54e8961bd04af46803fbf137ffcd9ff8205dd2977b96f39c14b2f03a12745343ef65fff77f8a0509354d3ff9d36f85b320fca31e0f"}}, {0xa0, &(0x7f0000000440)=ANY=[@ANYBLOB="a0033648d35e7a43c03f5fc65bbbb3c336d8e44dbe8bd58c2bb94131ccd52041267f96c934c1cf0122bba5f3afe8cd495ae8689e01e62a74d1860de6877463677cee30edf159c4e5c7cb8adfc42c77c770dd660f7caf16a1868e08598b475c054fca4708293211b34506c506c03b033f8507273fd658c0ca7ee6614000007f874c7c90e97624d6e8dd3777d4f0478ced5d70acbbae558bfdcfe622688572a9b7"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x1b, &(0x7f0000000500)=@string={0x1b, 0x3, "dfa0b1c3956b23a80a150ae395579a408ffb81c4dcb164d50d"}}, {0x15, &(0x7f0000000540)=@string={0x15, 0x3, "05f63c9b699a28e1558fa3138d4af70fdf4b0c"}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 17:38:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) read$FUSE(r2, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r2, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:44 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0), 0x0, 0x100) 17:38:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) read$FUSE(r2, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r2, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:45 executing program 2: syz_open_dev$usbfs(&(0x7f0000000000), 0x45c4aaed, 0x0) 17:38:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a3", 0x40}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:38:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 484.001187][T11307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11307 comm=syz-executor.2 17:38:46 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 17:38:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) read$FUSE(r2, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r2, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 484.919840][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 485.218462][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 485.349069][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:38:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0), 0x0, 0x100) 17:38:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 485.728905][ T24] usb 7-1: string descriptor 0 read error: -22 [ 485.735433][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 485.762929][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:38:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 486.210249][ T3761] usb 7-1: USB disconnect, device number 5 17:38:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:49 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}}) 17:38:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r2) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r1, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 487.128878][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 487.379719][ T24] usb 7-1: Using ep0 maxpacket: 8 17:38:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r2) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r1, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:49 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@loopback={0xe8000000}, @in=@multicast1}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8) 17:38:49 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x2}, &(0x7f0000000880)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffb) [ 487.697738][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:38:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001340)={'wg1\x00'}) [ 487.832384][ T39] audit: type=1400 audit(1659202730.092:341): avc: denied { ioctl } for pid=11357 comm="syz-executor.1" path="socket:[56803]" dev="sockfs" ino=56803 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 17:38:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r2) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r1, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 487.979924][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 487.987905][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.997390][ T24] usb 7-1: Product: syz [ 488.039279][ T24] usb 7-1: Manufacturer: syz [ 488.112905][ T24] usb 7-1: SerialNumber: syz [ 488.448188][ T41] usb 7-1: USB disconnect, device number 6 17:38:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a3", 0x40}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:38:51 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) 17:38:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) read$FUSE(r2, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r2, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 489.008847][ T39] audit: type=1400 audit(1659202731.262:342): avc: denied { read } for pid=11363 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 17:38:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) read$FUSE(r2, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r2, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 489.228790][T11377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11377 comm=syz-executor.2 17:38:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:52 executing program 1: pselect6(0x40, &(0x7f0000000480)={0x2420}, 0x0, 0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580), 0x8}) 17:38:52 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xb7, &(0x7f0000000100)=""/183, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:38:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) read$FUSE(r2, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r2, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a3", 0x40}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:38:52 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e) 17:38:52 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e) 17:38:52 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e) [ 490.543096][T11401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11401 comm=syz-executor.2 17:38:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:53 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:53 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e) 17:38:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a3", 0x40}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 491.747584][T11415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11415 comm=syz-executor.2 17:38:54 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1}}]}}]}}, 0x0) [ 492.144066][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd 17:38:54 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a3", 0x40}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 492.499337][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 492.655393][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 492.783914][T11426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11426 comm=syz-executor.2 17:38:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 492.889397][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 17:38:55 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:56 executing program 2: mknodat$loop(0xffffffffffffffff, 0x0, 0x60ff, 0x0) [ 493.829517][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:38:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001600)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 493.914180][ T24] usb 6-1: Product: syz [ 493.917622][ T24] usb 6-1: Manufacturer: syz [ 493.987971][ T24] usb 6-1: SerialNumber: syz 17:38:56 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x10, &(0x7f00000009c0)={{{@in6=@loopback, @in=@multicast1}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8) [ 494.290221][ T24] usb 6-1: USB disconnect, device number 11 17:38:57 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1}}]}}]}}, 0x0) 17:38:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:57 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x42, &(0x7f00000009c0)={{{@in6=@loopback, @in=@multicast1}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8) 17:38:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:57 executing program 2: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), 0x0) 17:38:57 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9}}]}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x1c, &(0x7f00000000c0)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0c7ad64f3839255dc5e35efbc97e8b52"}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}, {0x0, 0x0}]}) [ 495.174806][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 495.330941][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 495.510318][ T24] usb 6-1: Using ep0 maxpacket: 8 17:38:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 495.582824][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 495.659752][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:38:57 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 495.809197][ T29] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 495.854026][ T29] usb 7-1: config 1 interface 0 has no altsetting 0 [ 495.923487][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 495.932079][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.989962][ T24] usb 6-1: Product: syz [ 495.994088][ T24] usb 6-1: Manufacturer: syz [ 496.008588][ T24] usb 6-1: SerialNumber: syz [ 496.304489][ T24] usb 6-1: USB disconnect, device number 12 [ 496.351865][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 496.370011][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.395617][ T29] usb 7-1: SerialNumber: syz [ 496.429299][T11455] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 496.663614][ T29] usb 7-1: USB disconnect, device number 7 17:38:59 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1}}]}}]}}, 0x0) 17:38:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:38:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 497.158722][ T15] usb 6-1: new high-speed USB device number 13 using dummy_hcd 17:38:59 executing program 2: syz_clone3(&(0x7f0000000100)={0x40088000, 0x0, 0x0, 0x0, {}, &(0x7f0000000340)=""/4096, 0x1000, 0x0, 0x0}, 0x58) [ 497.440535][ T15] usb 6-1: Using ep0 maxpacket: 8 17:38:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 497.590027][ T15] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:39:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 497.849124][ T15] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 497.873887][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.881312][ T15] usb 6-1: Product: syz [ 497.886539][ T15] usb 6-1: Manufacturer: syz [ 497.918216][ T15] usb 6-1: SerialNumber: syz 17:39:00 executing program 2: syz_clone3(&(0x7f0000000100)={0x40088000, 0x0, 0x0, 0x0, {}, &(0x7f0000000340)=""/4096, 0x1000, 0x0, 0x0}, 0x58) [ 498.271697][ T15] usb 6-1: USB disconnect, device number 13 17:39:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:01 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1}}]}}]}}, 0x0) 17:39:01 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:01 executing program 2: syz_clone3(&(0x7f0000000100)={0x40088000, 0x0, 0x0, 0x0, {}, &(0x7f0000000340)=""/4096, 0x1000, 0x0, 0x0}, 0x58) [ 499.300190][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd 17:39:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 499.599254][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 499.719330][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:39:02 executing program 2: syz_clone3(&(0x7f0000000100)={0x40088000, 0x0, 0x0, 0x0, {}, &(0x7f0000000340)=""/4096, 0x1000, 0x0, 0x0}, 0x58) 17:39:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 499.899470][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 500.007624][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.027078][ T24] usb 6-1: Product: syz [ 500.033639][ T24] usb 6-1: Manufacturer: syz [ 500.047908][ T24] usb 6-1: SerialNumber: syz [ 500.370850][ T24] usb 6-1: USB disconnect, device number 14 17:39:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:03 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:03 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x22800, 0x0) 17:39:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:03 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x42, 0x0, 0x0) 17:39:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x4000}, 0x90) 17:39:03 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x21, &(0x7f00000009c0)={{{@in6=@loopback, @in=@multicast1}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8) 17:39:03 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 17:39:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) shutdown(r0, 0x0) [ 501.658868][ T3845] usb 7-1: new high-speed USB device number 8 using dummy_hcd 17:39:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 501.979043][ T3845] usb 7-1: Using ep0 maxpacket: 8 [ 502.100370][ T3845] usb 7-1: unable to get BOS descriptor or descriptor too short [ 502.181165][ T3845] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 502.205007][ T3845] usb 7-1: can't read configurations, error -71 17:39:04 executing program 1: syz_clone3(&(0x7f0000000100)={0x40088000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x1}, 0x58) 17:39:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:04 executing program 1: syz_usb_connect$cdc_ncm(0x5, 0x7a, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x80, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "6fd36f50cc"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0x0, 0x4}, {0x6, 0x24, 0x1a, 0x2, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x1f, 0x4, 0x5a}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x4, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x1, 0x81}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x81, 0x0, 0xfb, 0x0, 0x81}, 0xf, &(0x7f0000000280)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x5}, @ptm_cap={0x3}]}, 0x1, [{0x2, &(0x7f00000002c0)=@string={0x2}}]}) 17:39:04 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x9, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @btf_id, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x8}, @initr0, @map_idx], &(0x7f0000000800)='GPL\x00', 0x5, 0xe9, &(0x7f0000000840)=""/233, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:39:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:04 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x0, 0x0}]}) [ 502.886496][ T41] usb 6-1: new high-speed USB device number 15 using dummy_hcd 17:39:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, 0x0, 0x0, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 503.159612][ T3845] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 503.194860][ T41] usb 6-1: Using ep0 maxpacket: 32 17:39:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 503.321111][ T41] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 503.356132][ T41] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.379261][ T41] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 503.385232][ T41] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 503.412079][ T3845] usb 7-1: Using ep0 maxpacket: 8 [ 503.429153][ T41] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 503.435226][ T41] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 503.489503][ T41] usb 6-1: language id specifier not provided by device, defaulting to English [ 503.530085][ T3845] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:39:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 503.801206][ T41] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.807219][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:39:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, 0x0, 0x0, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 503.891379][ T41] usb 6-1: Product: syz [ 503.898424][ T41] usb 6-1: Manufacturer: syz [ 503.931898][ T41] usb 6-1: SerialNumber: syz [ 504.139794][ T3845] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 504.146458][ T3845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.158206][ T3845] usb 7-1: Product: syz [ 504.163869][ T3845] usb 7-1: SerialNumber: syz [ 504.380134][ T41] cdc_ncm 6-1:1.0: bind() failure [ 504.398451][ T41] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 504.420330][ T41] cdc_ncm 6-1:1.1: bind() failure [ 504.442771][ T41] usb 6-1: USB disconnect, device number 15 [ 504.472833][ T3845] usb 7-1: USB disconnect, device number 9 17:39:07 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff76}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xb7, &(0x7f0000000100)=""/183, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:39:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, 0x0, 0x0, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:07 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x3a, 0x22, 0x0, 0x0) 17:39:07 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x400}}]}}}]}}]}}, 0x0) 17:39:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) read$FUSE(r2, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r2, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:07 executing program 2: getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 505.291076][ T39] audit: type=1804 audit(1659202747.552:343): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir2963427385/syzkaller.5tSFAW/846/bus" dev="sda1" ino=1163 res=1 errno=0 [ 505.361005][ T6] usb 6-1: new high-speed USB device number 16 using dummy_hcd 17:39:07 executing program 2: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000300), 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 17:39:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) read$FUSE(r2, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r2, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 505.638993][ T6] usb 6-1: Using ep0 maxpacket: 8 17:39:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800), 0x0, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r3) read$FUSE(r2, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r2, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 505.779095][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 505.817575][ T6] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 505.829435][ T6] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 506.058093][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 506.079429][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.085973][ T6] usb 6-1: Product: syz [ 506.091165][ T6] usb 6-1: Manufacturer: syz [ 506.095613][ T6] usb 6-1: SerialNumber: syz 17:39:08 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 506.151111][T11578] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 506.466662][ T6] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 506.507586][ T6] usb 6-1: USB disconnect, device number 16 [ 506.602723][ T6] usblp0: removed 17:39:09 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x24, &(0x7f00000009c0)={{{@in6=@loopback, @in=@multicast1}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8) 17:39:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800), 0x0, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:09 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)) open(0x0, 0x0, 0x0) r4 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r4, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000000140)=[{}]) process_vm_writev(r4, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) 17:39:09 executing program 2: syz_clone3(&(0x7f0000000100)={0x40088000, 0x0, 0x0, 0x0, {}, &(0x7f0000000340)=""/4096, 0x1000, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 17:39:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 507.654694][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.661500][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 17:39:09 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x23}, 0x14) 17:39:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)) open(0x0, 0x0, 0x0) r4 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r4, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000000140)=[{}]) process_vm_writev(r4, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) 17:39:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)) open(0x0, 0x0, 0x0) r4 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r4, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000000140)=[{}]) process_vm_writev(r4, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) 17:39:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800), 0x0, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:11 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)) open(0x0, 0x0, 0x0) r4 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r4, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000000140)=[{}]) process_vm_writev(r4, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) 17:39:11 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x0, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:11 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)) open(0x0, 0x0, 0x0) r4 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r4, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000000140)=[{}]) process_vm_writev(r4, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) 17:39:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x0, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:12 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)) open(0x0, 0x0, 0x0) r4 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r4, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000000140)=[{}]) process_vm_writev(r4, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) 17:39:12 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)) open(0x0, 0x0, 0x0) r4 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r4, &(0x7f00000000c0)={0x0, 0x0, 0x1}, &(0x7f0000000140)=[{}]) process_vm_writev(r4, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) 17:39:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:13 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x0, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:13 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x40001001}], 0x10, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = creat(0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) lseek(r2, 0x0, 0x0) lseek(r0, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000) [ 511.452596][T11691] loop2: detected capacity change from 0 to 264192 [ 511.624444][T11691] FAT-fs (loop2): Unrecognized mount option "" or missing value 17:39:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:14 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x7}]}]}}, &(0x7f00000000c0)=""/229, 0x2e, 0xe5, 0x1}, 0x20) 17:39:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x127a46, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) [ 512.294480][ T39] audit: type=1800 audit(1659202754.562:344): pid=11705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1160 res=0 errno=0 17:39:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0), 0x0, 0x0) 17:39:14 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "0c7ad64f3839255dc5e35efbc97e8b52"}]}}) 17:39:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) 17:39:15 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffa) [ 513.688855][ T1387] usb 7-1: new high-speed USB device number 10 using dummy_hcd 17:39:16 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x48}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9}}]}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:39:16 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 513.959918][ T1387] usb 7-1: Using ep0 maxpacket: 8 17:39:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x0, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 514.080342][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 514.248988][ T1387] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 514.328946][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 514.449170][ T1387] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 514.458166][ T1387] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.467659][ T1387] usb 7-1: Product: syz [ 514.486087][ T1387] usb 7-1: Manufacturer: syz [ 514.499135][ T1387] usb 7-1: SerialNumber: syz [ 514.589493][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 514.760138][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 514.819179][ T1387] usb 7-1: USB disconnect, device number 10 [ 515.209790][ T24] usb 6-1: string descriptor 0 read error: -22 [ 515.214127][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 515.225713][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.323797][T11724] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 515.343036][T11724] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 17:39:17 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x5}}]}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x27, &(0x7f00000000c0)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "0c7ad64f3839255dc5e35efbc97e8b52"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x9, 0x85, 0x519}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 17:39:17 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused, @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 515.596179][T11566] usb 6-1: USB disconnect, device number 17 [ 515.702213][ T6] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 515.988914][ T6] usb 7-1: Using ep0 maxpacket: 8 17:39:18 executing program 1: syz_usb_connect(0x5, 0xe2, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7b, 0x16, 0xcc, 0x40, 0x7b8, 0xb21d, 0x50be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x1, 0x0, 0x19, 0xc0, 0x0, [{{0x9, 0x4, 0x41, 0x0, 0x4, 0x2b, 0xc1, 0x1, 0x0, [@hid_hid={0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xd1d}}], [{{0x9, 0x5, 0x5, 0x4, 0x0, 0x1f, 0x0, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xfffd}]}}, {{0x9, 0x5, 0x7, 0x3, 0x0, 0x0, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8}, @generic={0x2a, 0x4, "6c86975258be3f6993acd75c5ed566eddfe85be560419d1e86c960e481aed7a7e010eaa5e164c2c5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x0, 0x7f, 0x0, [@generic={0x2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, [@generic={0x57, 0x4, "654003d4a4c8c2a758f7b5bccdddc5429744e92f0fa5c6204e14335d1bd4541c778767dac076ddbd19ce60c2d2200b7e18142a7bb41cb38b9483a114ea4135a8a02b43def0a186486687a957af3e9a24e9e21fd4cb"}]}}]}}]}}]}}, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x8, 0x0) 17:39:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused, @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:18 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 516.269316][ T6] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 516.297833][ T6] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 516.318590][ T6] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 516.346017][ T6] usb 7-1: config 1 interface 0 has no altsetting 0 17:39:18 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused, @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 516.599154][ T29] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 516.702144][ T6] usb 7-1: string descriptor 0 read error: -22 [ 516.748506][ T6] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 516.809124][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.870165][T11737] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 517.039094][ T29] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 517.085391][ T29] usb 6-1: config 0 has an invalid interface number: 108 but max is 0 [ 517.095775][ T29] usb 6-1: config 0 has an invalid interface number: 101 but max is 0 [ 517.114664][ T29] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 517.137090][ T6] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 517.144112][ T29] usb 6-1: config 0 has no interface number 0 [ 517.157093][ T29] usb 6-1: config 0 has no interface number 1 [ 517.178865][ T6] usb 7-1: USB disconnect, device number 11 [ 517.203466][ T29] usb 6-1: config 0 has no interface number 2 [ 517.212352][ T29] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 517.227921][ T6] usblp0: removed [ 517.230735][ T29] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 517.267086][ T29] usb 6-1: config 0 interface 65 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 517.308400][ T29] usb 6-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 517.337268][ T29] usb 6-1: too many endpoints for config 0 interface 108 altsetting 134: 151, using maximum allowed: 30 17:39:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x0) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 517.357521][ T29] usb 6-1: config 0 interface 108 altsetting 134 has an invalid endpoint with address 0x0, skipping [ 517.382064][ T29] usb 6-1: config 0 interface 108 altsetting 134 endpoint 0x1 has invalid wMaxPacketSize 0 [ 517.411376][ T29] usb 6-1: config 0 interface 108 altsetting 134 has 2 endpoint descriptors, different from the interface descriptor's value: 151 [ 517.461813][ T29] usb 6-1: config 0 interface 101 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 517.487073][ T29] usb 6-1: config 0 interface 108 has no altsetting 0 [ 517.548352][ T29] usb 6-1: config 0 interface 101 has no altsetting 0 17:39:19 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x400}}]}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 17:39:19 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) [ 517.740558][ T29] usb 6-1: New USB device found, idVendor=07b8, idProduct=b21d, bcdDevice=50.be [ 517.767163][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.807215][ T29] usb 6-1: Product: syz [ 517.869192][ T29] usb 6-1: Manufacturer: syz [ 517.873365][ T29] usb 6-1: SerialNumber: syz [ 517.881156][ T29] usb 6-1: config 0 descriptor?? [ 518.008883][ T3098] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 518.255471][ T3098] usb 7-1: Using ep0 maxpacket: 8 17:39:20 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 518.330418][ T29] usb 6-1: USB disconnect, device number 18 [ 518.381852][ T3098] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 518.659261][ T3098] usb 7-1: string descriptor 0 read error: -22 [ 518.664681][ T3098] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 17:39:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:39:20 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) [ 518.712265][ T3098] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.739565][T11759] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 519.020486][ T3098] usb 7-1: USB disconnect, device number 12 [ 519.034607][T11773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11773 comm=syz-executor.1 17:39:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:21 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='max=000000000141012,max=0000']) 17:39:21 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) 17:39:22 executing program 2: openat$vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000700)=[{&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/169, 0xa9}], 0x44, &(0x7f0000000940)=[{&(0x7f0000000740)=""/207, 0xcf}, {&(0x7f0000000840)=""/251, 0xfb}], 0x2, 0x0) 17:39:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6a05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd114c25e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f2908fa8d8ba6863e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d5b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13678b73157602100fb20b99306a7927d0c710d6ce4c871d3bb525789b4b1d0605c4ee6d95abe0095aff32c536324612dac0be9620c7cbf73b2", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:39:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 520.241885][T11792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11792 comm=syz-executor.2 [ 520.243543][T11793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11793 comm=syz-executor.1 17:39:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:39:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6a05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd114c25e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f2908fa8d8ba6863e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d5b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13678b73157602100fb20b99306a7927d0c710d6ce4c871d3bb525789b4b1d0605c4ee6d95abe0095aff32c536324612dac0be9620c7cbf73b2", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:39:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:23 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 521.425838][T11805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11805 comm=syz-executor.2 [ 521.434453][T11806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11806 comm=syz-executor.1 [ 521.751477][ T39] audit: type=1400 audit(1659202763.622:345): avc: denied { search } for pid=11797 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.061701][ T39] audit: type=1400 audit(1659202764.242:346): avc: denied { read } for pid=11807 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.088503][ T39] audit: type=1400 audit(1659202764.242:347): avc: denied { open } for pid=11807 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.119913][ T39] audit: type=1400 audit(1659202764.242:348): avc: denied { getattr } for pid=11807 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.155007][ T39] audit: type=1400 audit(1659202764.412:349): avc: denied { write } for pid=11797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1471 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.180534][ T39] audit: type=1400 audit(1659202764.412:350): avc: denied { add_name } for pid=11797 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.213831][ T39] audit: type=1400 audit(1659202764.412:351): avc: denied { create } for pid=11797 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 17:39:24 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 522.308817][ T39] audit: type=1400 audit(1659202764.412:352): avc: denied { write open } for pid=11797 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth0.ra" dev="tmpfs" ino=8672 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 522.361650][ T39] audit: type=1400 audit(1659202764.412:353): avc: denied { append } for pid=11797 comm="dhcpcd-run-hook" name="resolv.conf.eth0.ra" dev="tmpfs" ino=8672 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 17:39:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:39:24 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 522.625533][T11821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11821 comm=syz-executor.1 [ 522.631587][ T39] audit: type=1400 audit(1659202764.412:354): avc: denied { getattr } for pid=11797 comm="dhcpcd-run-hook" path="/tmp/resolv.conf" dev="tmpfs" ino=8 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 523.252618][T11820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11820 comm=syz-executor.2 17:39:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:25 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 523.618997][T11838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11838 comm=syz-executor.1 17:39:26 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:39:26 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 524.759811][T11848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11848 comm=syz-executor.1 17:39:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:39:28 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6a05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd114c25e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f2908fa8d8ba6863e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d5b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13678b73157602100fb20b99306a7927d0c710d6ce4c871d3bb525789b4b1d0605c4ee6d95abe0095aff32c536324612dac0be9620c7cbf73b2", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 526.276284][T11862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11862 comm=syz-executor.1 [ 526.350431][T11865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11865 comm=syz-executor.2 [ 527.084817][T10342] udevd[10342]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 17:39:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6a05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd114c25e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f2908fa8d8ba6863e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d5b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13678b73157602100fb20b99306a7927d0c710d6ce4c871d3bb525789b4b1d0605c4ee6d95abe0095aff32c536324612dac0be9620c7cbf73b2", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:39:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:29 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:39:29 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 527.573996][T11879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11879 comm=syz-executor.2 [ 527.676983][T11880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11880 comm=syz-executor.1 17:39:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 528.532579][T11886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11886 comm=syz-executor.2 17:39:30 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:39:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 528.992418][T11892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11892 comm=syz-executor.1 17:39:32 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6a05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd114c25e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f2908fa8d8ba6863e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d5b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13678b73157602100fb20b99306a7927d0c710d6ce4c871d3bb525789b4b1d0605c4ee6d95abe0095aff32c536324612dac0be9620c7cbf73b2", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:39:32 executing program 2: getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='#\x00'], 0x100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 530.087216][T11904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=11904 comm=syz-executor.1 17:39:33 executing program 2: getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='#\x00'], 0x100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 17:39:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 530.984754][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 530.984773][ T39] audit: type=1804 audit(1659202772.432:358): pid=11900 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir2963427385/syzkaller.5tSFAW/866/bus" dev="sda1" ino=1163 res=1 errno=0 [ 531.058586][ T39] audit: type=1800 audit(1659202772.432:359): pid=11900 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1163 res=0 errno=0 [ 531.140014][ T39] audit: type=1804 audit(1659202773.342:360): pid=11909 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir2963427385/syzkaller.5tSFAW/867/bus" dev="sda1" ino=1163 res=1 errno=0 [ 531.190174][ T39] audit: type=1800 audit(1659202773.342:361): pid=11909 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1163 res=0 errno=0 17:39:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:33 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0)=[&(0x7f00000000c0)='*#){\xaa)*\\&+.:$+\xb4\x00', &(0x7f0000000100)=')^\x00', &(0x7f0000000280)='\x00'], &(0x7f0000000380)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='#\x00'], 0x100) 17:39:33 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:33 executing program 1: syz_clone3(&(0x7f0000000100)={0x40088000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 17:39:34 executing program 2: getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='#\x00'], 0x100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 532.158449][ T39] audit: type=1804 audit(1659202774.422:362): pid=11924 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir2963427385/syzkaller.5tSFAW/868/bus" dev="sda1" ino=1163 res=1 errno=0 [ 532.217429][ T39] audit: type=1800 audit(1659202774.482:363): pid=11924 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1163 res=0 errno=0 17:39:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:34 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:34 executing program 1: socket(0x28, 0x0, 0xe1) 17:39:34 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) shutdown(r0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:39:35 executing program 2: getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x200, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='#\x00'], 0x100) r1 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 17:39:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 533.289064][ T39] audit: type=1804 audit(1659202775.542:364): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir2963427385/syzkaller.5tSFAW/869/bus" dev="sda1" ino=1147 res=1 errno=0 17:39:35 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 533.538924][ T39] audit: type=1800 audit(1659202775.592:365): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1147 res=0 errno=0 17:39:35 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x35, &(0x7f00000009c0)={{{@in6=@loopback, @in=@multicast1}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8) 17:39:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x200, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[&(0x7f00000000c0)='*#){\xaa)*\\&+.:$+\xb4\x00', &(0x7f0000000100)=')^\x00', &(0x7f0000000280)='\x00'], 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r3, r4, 0x0, 0x10000) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 533.988588][ T39] audit: type=1804 audit(1659202776.252:366): pid=11952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir2963427385/syzkaller.5tSFAW/871/bus" dev="sda1" ino=1163 res=1 errno=0 [ 534.103306][ T39] audit: type=1800 audit(1659202776.252:367): pid=11952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1163 res=0 errno=0 17:39:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000580)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) creat(&(0x7f0000000040)='./bus\x00', 0x0) 17:39:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x0, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:37 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) shutdown(r0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:39:37 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9]}) 17:39:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x0, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000580)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) creat(&(0x7f0000000040)='./bus\x00', 0x0) 17:39:38 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9]}) 17:39:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00), 0x0, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000580)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 536.998987][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 536.999005][ T39] audit: type=1804 audit(1659202779.262:374): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir2963427385/syzkaller.5tSFAW/874/bus" dev="sda1" ino=1159 res=1 errno=0 17:39:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x200, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f0000000580)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r2, r3, 0x0, 0x10000) creat(&(0x7f0000000040)='./bus\x00', 0x0) [ 537.192097][ T39] audit: type=1800 audit(1659202779.322:375): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1159 res=0 errno=0 [ 537.396024][ T39] audit: type=1804 audit(1659202779.322:376): pid=11982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir2963427385/syzkaller.5tSFAW/874/bus" dev="sda1" ino=1159 res=1 errno=0 [ 537.580814][ T39] audit: type=1804 audit(1659202779.452:377): pid=11984 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/syzkaller-testdir2963427385/syzkaller.5tSFAW/875/bus" dev="sda1" ino=1159 res=1 errno=0 [ 537.635600][ T39] audit: type=1800 audit(1659202779.452:378): pid=11984 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1159 res=0 errno=0 [ 537.676931][ T39] audit: type=1804 audit(1659202779.522:379): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/syzkaller-testdir2963427385/syzkaller.5tSFAW/875/bus" dev="sda1" ino=1159 res=1 errno=0 17:39:40 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) shutdown(r0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:39:40 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x9]}) 17:39:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000006d0000009500"/25], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r5 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r5, &(0x7f00000000c0)={0x6, 0x0, 0x1}, &(0x7f0000000140)=[{}]) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) 17:39:41 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:41 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80000000]}) 17:39:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000006d0000009500"/25], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r5 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r5, &(0x7f00000000c0)={0x6, 0x0, 0x1}, &(0x7f0000000140)=[{}]) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) 17:39:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:42 executing program 1: sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) shutdown(r0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:39:42 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80000000]}) 17:39:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000006d0000009500"/25], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r5 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r5, &(0x7f00000000c0)={0x6, 0x0, 0x1}, &(0x7f0000000140)=[{}]) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) 17:39:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000006d0000009500"/25], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r5 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r5, &(0x7f00000000c0)={0x6, 0x0, 0x1}, &(0x7f0000000140)=[{}]) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) 17:39:43 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80000000]}) 17:39:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:43 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:39:44 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000040c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x3f000000) 17:39:44 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:39:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:45 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) 17:39:45 executing program 1: syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x0, 0x78}}, [{{0x9, 0x5, 0x82, 0x2, 0x400}}]}}}]}}]}}, 0x0) [ 543.151984][ T24] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 543.228839][ T1259] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 543.490879][ T1259] usb 7-1: Using ep0 maxpacket: 8 [ 543.603561][ T1259] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 17:39:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 543.682227][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 17:39:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 543.834716][ T1259] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 543.843044][ T1259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.871963][ T1259] usb 7-1: Product: syz [ 543.877166][ T1259] usb 7-1: Manufacturer: syz [ 543.888356][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 543.918075][ T1259] usb 7-1: SerialNumber: syz [ 543.940013][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.984576][ T24] usb 6-1: Product: syz [ 544.018856][ T24] usb 6-1: Manufacturer: syz [ 544.025869][ T24] usb 6-1: SerialNumber: syz [ 544.091127][T12049] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 544.100550][T12049] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 544.319789][ T3761] usb 7-1: USB disconnect, device number 13 [ 544.384941][ T6] usb 6-1: USB disconnect, device number 19 17:39:46 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:39:47 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 17:39:47 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000001640)=[{&(0x7f00000002c0)="f0eadbf8efa4ff6e0a4173988bc00f85af8b514453773992012962e4a348929cfb4a759ad06ae5ce5de485433ce28d8729666c4de2f0db2e4e67e0225c9cd79c7dc5e67afca2c25e677e3e453490e6f61c4ae7c10414f60ec5681868c4e08fa7bbca6c788f5f7c6e7666219032924074ca2900d1987a2ecdb777c4978fa429b00cec5f54f1e9879e2b0420c90271ad55ee178e091027bd8fa43c42bcc7c6dcbee4b26130cef879140fadc7c06881515003bcc7824ea79de1c49a2fc37be1c756037a8179c019e8047245fe50d12dc172a1e9e1260762685fc19234a5cd964926bfdaaf839983e9d49cc52a793718675b1dca13fc7e463e17318003f186092ec481b66c11e8829da50144675a0a1b54bfa9f3436acbe358e26f57696a6d04299f78d7af9e50e98855a26213492d56b1181124e7b9ee00c51d8db9dce25e8b1e4342dd86d94267eaa90b90d70fde0506f013fda1f4ba37a330552af95db9bcd1a39e67b48b240183bb81db78c98b1843d3ee2d61f53aaaa7160c60c3f99768dbbda5fb3b0f51c6ce14277c89d92c8d2d6dfa3b9650a28b0692b01d989e1815319e5528b77bf217ace7c951a0dd248e95b7a9124deea2af04ae4914093f769b4f7abf16718e9227d7f0137ddd8dde9c664d0ff01bd62eb9d9f4395c55747290afd64db1e7630fc6ec0c879d1e23c06f27a7de255b5e9f056ef80eacb41921ce4b40fff01fba1a28a04627d1e0bc279aa93f6d9bfcb237db6ff575f0a07dd7ad848f5f26a50b26ac3f184e398ffa37ea14f90bdbec9fc1f392351d239c14f592ea05f19e3d24e69b4fe601be3c43b857043b594ca8c4af5c767d56ea31c1eb19baf6daeef69098baa5ae71c9c3841ec942802fefac08035d9484e4e3c01c111eb53f1e64c7325f1f7805fa92a4ffdb25ef052312491eff2cf51c7c089ee676042aab32e0b693f265ea6e11ee62cd2efe0b4de83ceabc8fe926714fe2ba64bdb3365182158bdc4e1f1d7a146ba43cd2b7101aa4c0e70908c0f48f67d8156c32074c72396f450dc0b55704f9592657e61fe69deedbbbf88acd569048ca59e6ea9d2e0c593f552a56181a7ea6d66c1c9a731e4efcc6736e61b70a65e056955c9eeff0acbaee15bdcb1fdfe13a734171aa99202679404dac6d8f0b00aa82df5d918010d3d4bb5f8623aac82ffa479cd42c5ded07d0059bbc6b24b2816605afc24de61c86f2c65d90474c0278c1bd443cdc3fd963ea1d59c174f19c1405da3330894769ba57df8efcf18bb337e7f82ded72c236c764061eb532253c06bfd774028bf96932e3aaeb8c85ead600ac53187ceb7df43da9d3d571ca969540980a4c1c8affa2aab59cc80ebe13a4a74dc8ab457d0186247ee40bc586f6352adbd8643ca4ae74b515dfcf39d0d6d51c0bf0b242fa607446aed0bfe798c648072191f83e6c17be3bc6a557ad1036b420e1e8a77d748054d71ea72ef8da5bc76392af16e2b8eaeede656e54059539a81ee3bde473f8043c009dd5c54477a414193e90e8b3025a6f6ed861a35c725a9b939ec9a69fcdb927eff83019fe8c92a3d7dbaf60bda2779eecf8f0bfb5e40b6ada5347c2d75cf6258922ef78956cb6417769613a1ce961ce388a8f28806db309ea4e95d56b1a9d417496437f50f084c1d05b840c237f5dc82865a12a0451810c3ec4fb1b2d5a8f35c27e8b6f9ae9fc672cebde150396a574ce2c9f646d2b704406095b8f6be6cc7fd29961a5cb6b5298898b0de5bc633340a58946166be5fffb30bc7fd7406293b497c85ffecf65c5f25225aad72846240ba7276464b24d833559f6845f273d7865a678b161e79636a804029c4d6530aad1d6edaa837c18f7d6dcce37ece899c804929e4d775dc68ac90ff6f929167b4477766fe2e285f9cea90d7364e7ced3e8f85e4a93592e29c9eae35df7af903cfbc5812e4e5a7017a6104aad48ccfb30c1c69ab36b5e216def714b30e8a360c64da3e07837ac44b44c987bebaad3e4b50a884878d73b960f78b3b46d2df267ec2b70162ff6c9a2fbb9b3bc17f75839816c65992d015d96280403724374bd681476162789dc1cb6e6ec7529e9301af2426f095eec8560d85fc8844ae13d8c18b24f87d6b1285e96571f8a8081b9fb577f9afaa4aba7fc48902206bb073181623acbc59742b3eb83b93bc69fa53e26c2a53b62b57bfcd62e48e2c3cd6443a1e926df221a4340bf1ffa3bdef5ccaee2cb66b7cf4fbbf96f0a724e21b1b4337490970e7e1a726e8648339ba7d400a83b2476ef8b26472fca7b4c41d6ca9f6ca354e69124bf03a1406965deeacccc0575241191d3e4285d4634cbde09a3f9c42b84e51f9f2b090871f35b160d5408145c9b65034e40b53d7b23e8c866d70bd45dd53f257860a91c34aef0ab0b527e13cdc020141a694649f455349e908f6b78b5fbb11f595d89edb742a293de56ba054b1a5f390038160271886d2863de8b244c045411a893ed1406cd8b69b3d2dfb6a9a7b6f4c31e1a30784e1a18efe5048ddc7ab548c26046d6ab4dca9c60cab7235fdbf26f8e4422b24ed4802168b27dbb41bd681a0a8e54df6a019e8ce9cd29f3ae87b5a6b2bc7ce80c2b7293c46902b16b46fea75d5895d164550a6e7ede308c74d6234ba64679703deb0e26edcc7fd8d182488297b28babe117fe819bcd4ffe93e0cc4c389c706588d7a00de2ed691a6aa6cee268c18eacda5f2ca1bbd8dae5adc54deab13e788165387d2426044d322bd7e0dd7abe2297c375f291d6da3bf3a331be3783c2f4024a5d77db8e69492ea40abce69649b7a1b90cfc45e83ed83774e6bd77b90cc9e70f253213de0f3e5d65126702197970c24725d506a44f895e09020edd59216b28ab16463f1d2000d21d95d2270af314e4d37308ced507dd5dc75de71ae1ef61a46cd452cd0fa43f758c7352099718203f6935c0f54a51e298ae842d7178f614b4b7c9c923d6ca0bb60c61d63d7d64e4da7f634bfd134622fd09ebe0f94c08009219f577102a8610b1efafa2e9e3e8fa64f4f727d4c5930aa69a77bdaa3712af61da2afac24fff10f0e7bac0ef677cdd308583127e02af9b4be5d15d9e3223bafeb74dad4e526f0c4f7644d3cb0423acffc999d324f927ac8956a1c76b03c1eded120fb7c95c7546df4789c3e2f68764346caf3c62a85b6ebe52b59c90cabfa6fed685eb06e9e20303bb5a055da3c3143bda6a3b3f68e7249bf8cb15b542cfb7ece62fee3bddaf24e6344828873d023d9fd79bc152919c34ce923eaaed90503c093a0812985e407f9359787c40786add19e70e673023c9aa8a8febad5242ad1a91c7d65d24d3d6762f9c0296d505660b1a8242327cf6b681b55dc3559a5b98955d29997c3ae318d4ff78bf33a25a93deabdfe492d7dbe1a96f8de21e312d069b483874188f86434f4c630391c7398bf1196278b6e49078f3bf779d6072abe365e95cf816d7e805610791e479baf7c8f41e53c1bc2b2c83fc81269a9079127d93e9ead7c0c1f178ff7e0b9f235e1e8f6ccf0511905296ac73d9bf14d5fb7e67edec0c0dbc1f4f1175d86421970451596b815d0227a6dec4c8b0c90844b69b1c447a73588f6143b5194f73d8a88f7365667a61d9c1c41519a3c718f380ab49310588fd4f7750bbdacad8d84f24403648f2f615364efbd73677f47916f0364c4152ed3e192246406227109cf7edc7ccb27061b69ddd01745d347f31abdff0f6718fb630c981509df6889e4b2fea5f8d707c68d031685141c1769b5c5fd91492bc374b8031b1a17c1a5735e2dfebb6494e45047df96963e169dbfdd090740abe4d40a8e32c9c8daf9c2f00204edbded68fbee44ca7f62a1e0a036bf271dec5c3f75a0e14cad2e6b23d34ec30c88373620ce187e112ac8555fc1e99f5c94a5a70cef047f900d4df52a79c5b9380033c775b9773701f8bbfcfeb5c5baac2bfca270b5723ce0b507a16eb133ff59cd448da471b0d13477c8888f03f70f13a44ab506152798918a21e395bf8eb50dbd57733ad66723739b11fab29991d8e74dfefffdd46c87c003c37dedb3a334e7f7493fa617d2d5779598a2d64fd1fdbb2ad3096839e5791a4d8bab1984369c759321df334106652f11b13ecd1c51bddf51c7ab0ca79b771e3cac692c154d014d9a0517f70d51f59e862d56b26a5e7218f322e6364df0ddbdb1d3d395798780067667a70c968c2eb15a8924330518cc375e936766bece87ec9e1d943f2097b2a25133858a2a239f3a6a2adc85cacc2ce4ef9b179fd551afbfaa132c9a448819c879183e662e853c0b0e46458466614f9f4f2ae20dd45f36b87f773c430f2ed3f237db7921c2aabe58a367dfd126c39d98516e7c56d3106e5d3096e00876f4b0f1499633abd30588b196b39caad35b8ff26d654de209a737ff45901312102fe3f267930486b5ea4caa4a71bfba78b033c92360fb03edbf185e7da9d4047b470f883412195fdfd00305369eed4545f5c5c48057c4ff8bc0eb5c941d7eeb7aa9d6a013653c3a2c18eeebfdea2fd0ab5cde60410ed93d25d13387b2ea238923641de0e56fee0d4c696aab8dc919a6ed6c924df575debff80988c6d664589cccf9cbcaed576a7f3d4bd19e71b239ab98e66db043aa6f490ed226ba4481fc820928ea1ba0542ffbe01d313655e829ba4a21912119150d0260bcb7f5c3d930087468763d4d2c93edec1929a61b1157ec79ce55e1de841aeec2b3e76b771e9ba32fe9c025df978f4a7f5121891595e6a1e216515596e0a322b052a585ff9bee06608c93803634eb07594", 0xd41}], 0x0, 0x0) [ 545.060281][T12073] loop1: detected capacity change from 0 to 6 [ 545.187392][ T3845] usb 7-1: new high-speed USB device number 14 using dummy_hcd 17:39:47 executing program 1: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) [ 545.260912][ T3729] Dev loop1: unable to read RDB block 6 [ 545.268253][ T3729] loop1: unable to read partition table [ 545.285163][ T3729] loop1: partition table beyond EOD, truncated [ 545.438949][ T3845] usb 7-1: Using ep0 maxpacket: 8 17:39:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 545.639034][ T3845] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:39:47 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 545.747416][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 546.009105][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 546.026873][ T3845] usb 7-1: string descriptor 0 read error: -22 [ 546.036493][ T3845] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 546.048009][ T3845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.162547][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 546.329089][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 546.336231][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.343067][ T24] usb 6-1: Product: syz [ 546.346783][ T24] usb 6-1: Manufacturer: syz [ 546.351039][ T24] usb 6-1: SerialNumber: syz [ 546.381935][T11566] usb 7-1: USB disconnect, device number 14 17:39:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 546.616920][ T24] usb 6-1: USB disconnect, device number 20 17:39:49 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 17:39:49 executing program 1: bpf$BPF_PROG_ATTACH(0x13, &(0x7f0000000300), 0x14) 17:39:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x9, 0x3, 0x13, &(0x7f0000006380)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) [ 547.303845][ T3098] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 547.319132][ T39] audit: type=1400 audit(1659202789.582:380): avc: denied { create } for pid=12097 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 17:39:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 547.548990][ T3098] usb 7-1: Using ep0 maxpacket: 8 17:39:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 547.755794][ T3098] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 548.049604][ T3098] usb 7-1: string descriptor 0 read error: -22 [ 548.057312][ T3098] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 548.087114][ T3098] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:39:50 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x9, 0x3, 0x13, &(0x7f0000006380)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 17:39:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 548.568255][ T3098] usb 7-1: USB disconnect, device number 15 17:39:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:39:51 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) 17:39:51 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x9, 0x3, 0x13, &(0x7f0000006380)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) [ 549.589719][T11566] usb 7-1: new high-speed USB device number 16 using dummy_hcd 17:39:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 549.878888][T11566] usb 7-1: Using ep0 maxpacket: 8 [ 550.045168][T11566] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:39:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 550.410457][T11566] usb 7-1: string descriptor 0 read error: -22 [ 550.437296][T11566] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 550.480713][T11566] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.756921][ T3098] usb 7-1: USB disconnect, device number 16 17:39:53 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x9, 0x3, 0x13, &(0x7f0000006380)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 17:39:53 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x0, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:39:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:53 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) [ 551.730820][ T3098] usb 7-1: new high-speed USB device number 17 using dummy_hcd 17:39:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x0, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 552.050226][ T3098] usb 7-1: Using ep0 maxpacket: 8 [ 552.189153][ T3098] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:39:54 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x0, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x9}}]}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x27, &(0x7f00000000c0)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0c7ad64f3839255dc5e35efbc97e8b52"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x85, 0x519}]}, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x418}}, {0x0, 0x0}]}) 17:39:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 552.511693][ T3098] usb 7-1: string descriptor 0 read error: -22 [ 552.526254][ T3098] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 552.539377][ T3761] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 552.551483][ T3098] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:39:54 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x0, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 552.794824][ T3761] usb 6-1: Using ep0 maxpacket: 8 [ 552.898090][ T29] usb 7-1: USB disconnect, device number 17 [ 553.039010][ T3761] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 553.061273][ T3761] usb 6-1: config 1 interface 0 has no altsetting 0 17:39:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 553.320250][ T3761] usb 6-1: string descriptor 0 read error: -22 [ 553.350626][ T3761] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 553.455371][ T3761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.501474][T12148] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 17:39:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = syz_clone(0x20000, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) 17:39:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x0, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 553.745424][ T3098] usb 6-1: USB disconnect, device number 21 17:39:56 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:56 executing program 1: add_key(&(0x7f0000000000)='keyring\x00', 0x0, &(0x7f0000000080)='r', 0x1, 0xfffffffffffffffd) 17:39:56 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x24, 0x0, 0x0) 17:39:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$getflags(r0, 0x401) 17:39:56 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x0, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:39:57 executing program 1: syz_clone3(&(0x7f0000000100)={0x40088000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 17:39:58 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:58 executing program 1: syz_clone3(&(0x7f0000000100)={0x40088000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 17:39:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0), 0x0, 0x100) 17:39:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x0, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:39:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:39:59 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x400}}]}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x27, &(0x7f00000000c0)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0c7ad64f3839255dc5e35efbc97e8b52"}, @wireless={0xb}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x820}}, {0x88, &(0x7f0000000140)=@string={0x88, 0x3, "94c2eb0ba8a4271cf1b7fcc212f05b13edca552b315a585f7cdb533c22932ce5ee5f18999a5f96a22be7a76867f1eb4c5a6eced98e2d44d44aeab1ea5662f6a0f4e13cf69a32cf3f477459bd3ac36d04000d8b91fd35924d8a122936135b9d7624eef9270625f46f694dfa6ab3f61ad4385132442e4449606b93725b634c760f43565fdde710"}}, {0x0, 0x0}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x426}}, {0xa0, 0x0}, {0x0, 0x0}]}) 17:39:59 executing program 1: syz_clone3(&(0x7f0000000100)={0x40088000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) 17:39:59 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x0, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 557.254858][ T3761] usb 7-1: new high-speed USB device number 18 using dummy_hcd 17:39:59 executing program 1: syz_clone3(&(0x7f0000000100)={0x40088000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x58) [ 557.572702][ T3761] usb 7-1: Using ep0 maxpacket: 8 [ 557.849232][ T3761] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 17:40:00 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 557.888973][ T3761] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 557.965823][ T3761] usb 7-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 558.069726][ T3761] usb 7-1: config 1 interface 0 has no altsetting 0 17:40:00 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x0, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 558.539067][ T3761] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 558.545607][ T3761] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.625576][ T3761] usb 7-1: Manufacturer: 슔௫꒨ᰧ럱싼á›ì«­â­•å¨±å½˜ã±“錢忮餘徚ꊖ梧䳫湚ⶎ푄扖ꃶ㊚ã¿ç‘‡ëµ™ìŒºÑ­à´€é†‹ã—½ä¶’ኊ㘩嬓çšî¸¤âŸ¹â”†æ¿´äµ©æ«ºïš³íšå„¸ä²ä®æ‰é«å­²ä±£à½¶å™ƒáƒ§ 17:40:00 executing program 1: add_key$fscrypt_provisioning(&(0x7f0000000280), 0x0, &(0x7f0000000300)={0x0, 0x0, @a}, 0x48, 0xfffffffffffffffb) 17:40:01 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 558.937458][ T3761] usb 7-1: SerialNumber: Ц [ 558.996868][T12202] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 559.260137][ T3761] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 559.351047][ T3761] usb 7-1: USB disconnect, device number 18 [ 559.360969][ T3761] usblp0: removed 17:40:02 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) 17:40:02 executing program 1: r0 = add_key$keyring(&(0x7f0000000540), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000005c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000580), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2) 17:40:02 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x0, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:40:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:40:02 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) [ 560.139101][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 560.419614][ T24] usb 7-1: Using ep0 maxpacket: 8 17:40:02 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 560.719083][ T24] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 17:40:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0x0, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 560.980338][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 561.029601][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.088001][ T24] usb 7-1: Product: syz [ 561.125015][ T24] usb 7-1: Manufacturer: syz [ 561.181304][ T24] usb 7-1: SerialNumber: syz [ 561.504789][T11566] usb 7-1: USB disconnect, device number 19 17:40:04 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:40:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:40:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 17:40:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0x0, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 562.261578][ T39] audit: type=1326 audit(1659202804.522:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12261 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2863a89209 code=0x0 [ 562.591145][T12272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=12272 comm=syz-executor.2 17:40:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 17:40:05 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:40:05 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0x0, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 563.319098][ T39] audit: type=1326 audit(1659202805.582:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12273 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2863a89209 code=0x0 17:40:05 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) [ 563.436830][ T39] audit: type=1326 audit(1659202805.692:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2863a89209 code=0x0 17:40:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="44000000c7bd7000fedbdf250a007a009ee0dfe0eff108e8a1a2092f188a4d000bd239abda6a05c42504567693b77f3e0ae74150e4afd13e32e21755163b7979303172f69cbd114c25e54cecdbd355447cd7df8bd6ebfd09f8577df2a8f89f0969f17e93a3d004cf4014ed7322d853f5328fc64c9e8292ed39354dfc78c72cd79485ebf707c9784a6bfeb3e6d27f2908fa8d8ba6863e6b29dcddcc63aa47261c661a410ede6fbc31a61e884bdd9d4c970de9d0d5b238281a0e97f9f1ad0940d6812940eb0843f1168e8cfa0aee54ccdb2ef595c5733629fc91447b14b17b6be6975abd77cd8b9314f06ab13678b73157602100fb20b99306a7927d0c710d6ce4c871d3bb525789b4b1d0605c4ee6d95abe0095aff32c536324612dac0be9620c7cbf73b2", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 563.785676][T12291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=12291 comm=syz-executor.2 17:40:06 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:40:06 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@empty, @mcast2, @private0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5000284}) 17:40:06 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:40:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:40:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x0, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:40:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pidfd_open(0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) stat(0x0, &(0x7f0000005300)) sendmmsg$unix(r1, &(0x7f00000053c0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)}, {0x0}, {&(0x7f0000000540)}, {0x0}, {&(0x7f0000000740)="21b40b67da20a917e78f5097d8f0cefa7e6553c3f377939cd12068f87c04dd984807ae4dc4f24d0f80e5744af653828b7d5bb6bbc7100a6dc124c3278fa3fec9ed2211e39f57823af109024c58df03c2b7e3a3c06014", 0x56}], 0x5, 0x0, 0xf8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000000) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) [ 565.170220][T12313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=12313 comm=syz-executor.2 [ 565.250590][T12312] overlayfs: failed to resolve './file0': -2 [ 565.619680][ T39] audit: type=1400 audit(1659202807.452:384): avc: denied { unlink } for pid=12306 comm="syz-executor.1" name="#1" dev="sda1" ino=1167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=chr_file permissive=1 [ 565.641208][T10342] udevd[10342]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory 17:40:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:40:08 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@loopback, @in=@multicast1}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0xe8) 17:40:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x6e, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001280)="a13fda402484be6c5fdd58bf4a1fb02f858ab2e4db2e8d024b94d91cc7b0d4f473f16ee48534ad3b109e0c3c5b02781c7601da60c08ff3a99aa9b35213eb31a32d", 0x41}], 0x2, &(0x7f0000001440)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000662714e80000000000000100000001000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0016"], 0x98, 0x20024080}}], 0x1, 0x20040000) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000014c0)={0x0, @l2tp={0x2, 0x2, @remote={0xac, 0x10, 0x3}}, @l2tp={0x2, 0x0, @empty, 0x4}, @generic={0x1d, "ddbc09eb9f46ecd05ddee9462b10"}, 0xf0f4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='syz_tun\x00', 0x0, 0xd7ff, 0x400}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="03000000141856927a012139ec27e5f113c26768bff7560001000000330000000000638af1432b8d010000003987fa1c04849a360e4d0081500000"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17:40:08 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x19, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:40:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/175) 17:40:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x0, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 566.535238][T12326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48583 sclass=netlink_route_socket pid=12326 comm=syz-executor.2 17:40:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/30) 17:40:09 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x5, 0x0, &(0x7f0000000100)) 17:40:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:40:09 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x7, 0x0, &(0x7f0000000100)) 17:40:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x3e9, 0x3, &(0x7f00000018c0)=@framed, &(0x7f0000001900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:40:09 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x0, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:40:09 executing program 2: syz_clone(0x21020400, 0x0, 0x0, 0x0, 0x0, 0x0) 17:40:09 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0x0) 17:40:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 567.871092][ T39] audit: type=1400 audit(1659202810.132:385): avc: denied { write } for pid=12360 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 17:40:10 executing program 1: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@gid={'gid', 0x3d, 0xee00}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67]}}, {@uid={'uid', 0x3d, 0xee00}}]}) [ 568.144944][ T39] audit: type=1400 audit(1659202810.412:386): avc: denied { mount } for pid=12365 comm="syz-executor.1" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 568.276017][ T39] audit: type=1400 audit(1659202810.532:387): avc: denied { unmount } for pid=3729 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 17:40:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:40:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}]}, 0x1c}}, 0x0) 17:40:10 executing program 1: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@gid={'gid', 0x3d, 0xee00}}, {@nr_inodes={'nr_inodes', 0x3d, [0x67]}}]}) 17:40:10 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x0, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:40:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r1, 0x14e3997f2875e767, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 17:40:11 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x3, 0x0, &(0x7f0000000100)) 17:40:11 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000600)="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", 0x1000}], 0x0, 0x0) 17:40:11 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x35, 0x0, &(0x7f0000000100)) [ 569.118361][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.123522][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 17:40:11 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{0x0}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:40:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:40:11 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x6b363a38a719059d, &(0x7f0000000300)) 17:40:12 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x0, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:40:12 executing program 1: syz_clone(0x21020400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 17:40:12 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x1e, 0x0, &(0x7f0000000100)) 17:40:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc004ae0a, 0x0) 17:40:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x14, 0x0, 0x0}) 17:40:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{0x0}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:40:12 executing program 1: syz_clone(0x21020400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 17:40:12 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x4d, 0x0, &(0x7f0000000100)) 17:40:13 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x3, 0x0, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:40:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000500)='X', 0x1}], 0x2}, 0x0) 17:40:13 executing program 1: syz_clone(0x21020400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 17:40:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1b, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:40:13 executing program 1: syz_clone(0x21020400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 17:40:13 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{0x0}], 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:40:13 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x3d, 0x0, &(0x7f0000000100)=0x1f00) 17:40:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000001c0)=@framed={{}, [], {0x95, 0x0, 0x0, 0x60}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:40:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x0, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:40:14 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x21, 0x0, &(0x7f0000000100)) 17:40:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xf, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:40:14 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@size={'size', 0x3d, [0x7]}}]}) 17:40:14 executing program 1: r0 = add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='Y', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xffffffffffffffff) [ 572.108346][T12453] tmpfs: Bad value for 'size' 17:40:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{0x0}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:40:14 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000007c0)) 17:40:14 executing program 2: r0 = add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='Y', 0x1, 0xffffffffffffffff) keyctl$search(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', 0x0, 0x0) 17:40:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x0, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) [ 572.755527][ T39] audit: type=1400 audit(1659202815.012:388): avc: denied { mounton } for pid=12462 comm="syz-executor.2" path="/syzkaller-testdir2963427385/syzkaller.5tSFAW/911/file0" dev="sda1" ino=1161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 17:40:14 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x7, &(0x7f0000000040)=@raw=[@func, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu, @map_idx], &(0x7f0000000380)='GPL\x00', 0x2, 0x1000, &(0x7f0000000740)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 17:40:15 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r2, &(0x7f00000002c0)='reno\x00', 0x5) creat(&(0x7f0000000240)='./file0\x00', 0x0) 17:40:15 executing program 1: syz_open_dev$dri(&(0x7f0000000140), 0xffffffffffffffff, 0x200000) 17:40:15 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000001fc0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) 17:40:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{0x0}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) 17:40:15 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0xce, 0x0, &(0x7f0000000100)) 17:40:15 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x3d, 0x0, &(0x7f0000000100)) 17:40:15 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) getpgrp(0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, 0x0, 0x0, @unused=[0x0, 0x6], @devid}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x4, 0x0, 0x4, 0x1], [0x0, 0x4, 0x1, 0x0, 0x0, 0x800, 0x0, 0x401, 0x5, 0x3, 0x7, 0x5, 0x409, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0xb8e, 0xff, 0x5, 0x1, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x0, 0x0, 0x4, 0x6, 0x8, 0x0, 0x100, 0x0, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0x0, 0x1, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x9, 0x7, 0x0, 0xff, 0xfe4, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x4, 0x7fffffffffffffff, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x8, 0x7, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x3f, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x9, 0xb0a, 0x2, 0x0, 0x0, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x6, 0x874, 0x0, 0x0, 0x0, 0x9, 0x80000000]}) 17:40:15 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r2, &(0x7f00000002c0)='reno\x00', 0x5) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 573.709542][ T39] audit: type=1400 audit(1659202815.962:389): avc: denied { unmount } for pid=3806 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 17:40:16 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r2, &(0x7f00000002c0)='reno\x00', 0x5) creat(&(0x7f0000000240)='./file0\x00', 0x0) [ 573.836665][ T8] ------------[ cut here ]------------ [ 573.894243][ T8] WARNING: CPU: 0 PID: 8 at fs/fuse/file.c:1843 fuse_writepages_fill+0x15ae/0x1a20 [ 574.010186][ T8] Modules linked in: [ 574.017158][ T8] CPU: 0 PID: 8 Comm: kworker/u17:0 Not tainted 5.19.0-rc8-syzkaller-00146-ge65c6a46df94 #0 [ 574.032143][ T8] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 574.046327][ T8] Workqueue: writeback wb_workfn (flush-0:50) [ 574.054799][ T8] RIP: 0010:fuse_writepages_fill+0x15ae/0x1a20 [ 574.064441][ T8] Code: ff 4c 89 ef e8 c3 6a fa fe e9 54 ec ff ff e8 b9 6a fa fe e9 7b ec ff ff e8 af 2d ae fe 4c 89 f7 e8 d7 c4 ae 06 e8 a2 2d ae fe <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 18 48 c1 ea 03 80 [ 574.102081][ T8] RSP: 0018:ffffc900005bf390 EFLAGS: 00010293 [ 574.108994][ T8] RAX: 0000000000000000 RBX: ffffc900005bf5f8 RCX: 0000000000000000 [ 574.132575][ T8] RDX: ffff888012462200 RSI: ffffffff82cb6e3e RDI: 0000000000000001 [ 574.141942][ T8] RBP: 0000000000000000 R08: 0000000000000000 R09: ffff8880004c7ce3 [ 574.148147][ T8] R10: ffffed1000098f9c R11: 0000000000000001 R12: ffffc900005bf608 [ 574.170660][ T8] R13: ffff8880004c7bc8 R14: ffff8880004c7ce0 R15: ffff8880004c7700 [ 574.177128][ T8] FS: 0000000000000000(0000) GS:ffff88802ca00000(0000) knlGS:0000000000000000 [ 574.184453][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 574.206889][ T8] CR2: 0000000020137000 CR3: 0000000072a07000 CR4: 0000000000150ee0 [ 574.251399][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 574.292467][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 574.311915][ T8] Call Trace: [ 574.319647][ T8] [ 574.325185][ T8] write_cache_pages+0x79f/0x1a50 [ 574.336149][ T8] ? fuse_writepages+0x410/0x410 [ 574.349109][ T8] ? folio_account_redirty+0x6e0/0x6e0 [ 574.364052][ T8] ? rcu_read_lock_sched_held+0x3a/0x70 [ 574.374881][ T8] ? trace_kmalloc+0x32/0xf0 [ 574.383733][ T8] ? __kmalloc+0x221/0x4d0 [ 574.393151][ T8] ? fuse_writepages+0x26e/0x410 [ 574.404526][ T8] ? mark_held_locks+0x9f/0xe0 [ 574.414648][ T8] fuse_writepages+0x29b/0x410 [ 574.425061][ T8] ? fuse_writepages_send+0x400/0x400 [ 574.435772][ T8] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 17:40:16 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000640)=[{0x0}, {0x0}], 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r4) read$FUSE(r3, &(0x7f0000002500)={0x2020}, 0xffffffffffffff98) io_uring_enter(r3, 0x7cbc, 0x802f, 0x2, &(0x7f0000000080)={[0xffffffffffff8000]}, 0x8) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000940)={0x0, 0x0, 0x0, [0x0, 0x0, 0x4, 0x1, 0xbcb5], [0x0, 0x4, 0x0, 0x0, 0x5, 0x800, 0x0, 0x401, 0x0, 0x0, 0x7, 0x5, 0x0, 0x7f, 0x0, 0x3, 0x0, 0x9, 0x1, 0x8e77, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xb96, 0x4, 0x100000000, 0x7, 0x20, 0x0, 0x4, 0x6, 0x8, 0x7, 0x100, 0x9a, 0x7fffffffffffffff, 0x9, 0xffff, 0x0, 0x0, 0x5, 0x7, 0xfffffffffffffe64, 0xe444, 0x0, 0xffffffffffff7fff, 0x1, 0xffff, 0x0, 0x80000001, 0x0, 0x0, 0x7, 0x0, 0xff, 0x0, 0x2fa794c2, 0x6, 0x4, 0x8000, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x3, 0x8, 0xff, 0x24f4, 0x6, 0x7ff, 0x2, 0x9, 0x1, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x8, 0x0, 0x3, 0x5, 0x80000001, 0xfffffffffffffffc, 0x0, 0x1ff, 0x331, 0x7, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x6, 0x10000, 0x0, 0xb0a, 0x2, 0x0, 0x3, 0x101, 0x3, 0xffffffffffffff99, 0x2, 0x3f, 0x400, 0x0, 0x874, 0x401, 0x0, 0xffffffffffffffff, 0x9, 0x80000000]}) [ 574.449966][ T8] ? fuse_writepages_send+0x400/0x400 [ 574.458441][ T8] ? fuse_writepages_send+0x400/0x400 [ 574.501022][ T8] do_writepages+0x1ab/0x690 [ 574.506283][ T8] ? writeback_set_ratelimit+0x150/0x150 [ 574.526588][ T8] ? io_schedule_timeout+0x140/0x140 [ 574.543056][ T8] ? preempt_schedule_thunk+0x16/0x18 [ 574.548148][ T8] ? preempt_schedule_common+0x59/0xc0 [ 574.553028][ T8] __writeback_single_inode+0x126/0x10d0 [ 574.560007][ T8] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 574.564762][ T8] writeback_sb_inodes+0x54d/0xf10 [ 574.569649][ T8] ? sync_inode_metadata+0xe0/0xe0 [ 574.574173][ T8] __writeback_inodes_wb+0xc6/0x280 [ 574.579724][ T8] wb_writeback+0x7f8/0xc30 [ 574.584797][ T8] ? __writeback_inodes_wb+0x280/0x280 [ 574.590673][ T8] ? __local_bh_enable_ip+0xa0/0x120 [ 574.595732][ T8] ? __local_bh_enable_ip+0xa0/0x120 [ 574.600921][ T8] wb_workfn+0x9cb/0x1230 [ 574.617957][ T8] ? inode_wait_for_writeback+0x30/0x30 [ 574.624787][ T8] ? lock_release+0x780/0x780 [ 574.633701][ T8] process_one_work+0x996/0x1610 [ 574.642652][ T8] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 574.649909][ T8] ? rwlock_bug.part.0+0x90/0x90 [ 574.656674][ T8] ? _raw_spin_lock_irq+0x41/0x50 [ 574.695860][ T8] worker_thread+0x665/0x1080 [ 574.700231][ T8] ? process_one_work+0x1610/0x1610 [ 574.705195][ T8] kthread+0x2e9/0x3a0 [ 574.710189][ T8] ? kthread_complete_and_exit+0x40/0x40 [ 574.716281][ T8] ret_from_fork+0x1f/0x30 [ 574.723276][ T8] [ 574.727650][ T8] Kernel panic - not syncing: panic_on_warn set ... [ 574.735366][ T8] CPU: 2 PID: 8 Comm: kworker/u17:0 Not tainted 5.19.0-rc8-syzkaller-00146-ge65c6a46df94 #0 [ 574.747542][ T8] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 574.757895][ T8] Workqueue: writeback wb_workfn (flush-0:50) [ 574.765389][ T8] Call Trace: [ 574.769223][ T8] [ 574.772253][ T8] dump_stack_lvl+0xcd/0x134 [ 574.777516][ T8] panic+0x2d7/0x636 [ 574.781574][ T8] ? panic_print_sys_info.part.0+0x10b/0x10b [ 574.802242][ T8] ? __warn.cold+0x1d1/0x2c5 [ 574.805495][ T8] ? fuse_writepages_fill+0x15ae/0x1a20 [ 574.809452][ T8] __warn.cold+0x1e2/0x2c5 [ 574.819132][ T8] ? fuse_writepages_fill+0x15ae/0x1a20 [ 574.825328][ T8] report_bug+0x1bc/0x210 [ 574.829862][ T8] handle_bug+0x3c/0x60 [ 574.834136][ T8] exc_invalid_op+0x14/0x40 [ 574.839030][ T8] asm_exc_invalid_op+0x16/0x20 [ 574.844241][ T8] RIP: 0010:fuse_writepages_fill+0x15ae/0x1a20 [ 574.850428][ T8] Code: ff 4c 89 ef e8 c3 6a fa fe e9 54 ec ff ff e8 b9 6a fa fe e9 7b ec ff ff e8 af 2d ae fe 4c 89 f7 e8 d7 c4 ae 06 e8 a2 2d ae fe <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 18 48 c1 ea 03 80 [ 574.872863][ T8] RSP: 0018:ffffc900005bf390 EFLAGS: 00010293 [ 574.879628][ T8] RAX: 0000000000000000 RBX: ffffc900005bf5f8 RCX: 0000000000000000 [ 574.888641][ T8] RDX: ffff888012462200 RSI: ffffffff82cb6e3e RDI: 0000000000000001 [ 574.898978][ T8] RBP: 0000000000000000 R08: 0000000000000000 R09: ffff8880004c7ce3 [ 574.907518][ T8] R10: ffffed1000098f9c R11: 0000000000000001 R12: ffffc900005bf608 [ 574.916827][ T8] R13: ffff8880004c7bc8 R14: ffff8880004c7ce0 R15: ffff8880004c7700 [ 574.926233][ T8] ? fuse_writepages_fill+0x15ae/0x1a20 [ 574.932508][ T8] write_cache_pages+0x79f/0x1a50 [ 574.938887][ T8] ? fuse_writepages+0x410/0x410 [ 574.944654][ T8] ? folio_account_redirty+0x6e0/0x6e0 [ 574.951116][ T8] ? rcu_read_lock_sched_held+0x3a/0x70 [ 574.957590][ T8] ? trace_kmalloc+0x32/0xf0 [ 574.962882][ T8] ? __kmalloc+0x221/0x4d0 [ 574.968165][ T8] ? fuse_writepages+0x26e/0x410 [ 574.973563][ T8] ? mark_held_locks+0x9f/0xe0 [ 574.978909][ T8] fuse_writepages+0x29b/0x410 [ 574.984566][ T8] ? fuse_writepages_send+0x400/0x400 [ 574.991113][ T8] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 574.998003][ T8] ? fuse_writepages_send+0x400/0x400 [ 575.003990][ T8] ? fuse_writepages_send+0x400/0x400 [ 575.009987][ T8] do_writepages+0x1ab/0x690 [ 575.015163][ T8] ? writeback_set_ratelimit+0x150/0x150 [ 575.021237][ T8] ? io_schedule_timeout+0x140/0x140 [ 575.027158][ T8] ? preempt_schedule_thunk+0x16/0x18 [ 575.033274][ T8] ? preempt_schedule_common+0x59/0xc0 [ 575.039353][ T8] __writeback_single_inode+0x126/0x10d0 [ 575.045657][ T8] ? wbc_attach_and_unlock_inode+0x8a/0x8d0 [ 575.066247][ T8] writeback_sb_inodes+0x54d/0xf10 [ 575.086799][ T8] ? sync_inode_metadata+0xe0/0xe0 [ 575.091032][ T8] __writeback_inodes_wb+0xc6/0x280 [ 575.095335][ T8] wb_writeback+0x7f8/0xc30 [ 575.099010][ T8] ? __writeback_inodes_wb+0x280/0x280 [ 575.119363][ T8] ? __local_bh_enable_ip+0xa0/0x120 [ 575.123863][ T8] ? __local_bh_enable_ip+0xa0/0x120 [ 575.129822][ T8] wb_workfn+0x9cb/0x1230 [ 575.134604][ T8] ? inode_wait_for_writeback+0x30/0x30 [ 575.140532][ T8] ? lock_release+0x780/0x780 [ 575.146249][ T8] process_one_work+0x996/0x1610 [ 575.151576][ T8] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 575.157922][ T8] ? rwlock_bug.part.0+0x90/0x90 [ 575.163782][ T8] ? _raw_spin_lock_irq+0x41/0x50 [ 575.170080][ T8] worker_thread+0x665/0x1080 [ 575.175788][ T8] ? process_one_work+0x1610/0x1610 [ 575.182026][ T8] kthread+0x2e9/0x3a0 [ 575.186932][ T8] ? kthread_complete_and_exit+0x40/0x40 [ 575.192920][ T8] ret_from_fork+0x1f/0x30 [ 575.197552][ T8] [ 575.203421][ T8] Kernel Offset: disabled [ 575.208992][ T8] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:40:17 Registers: info registers vcpu 0 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff845fd7a1 RDI=ffffffff9122ab00 RBP=ffffffff9122aac0 RSP=ffffc900005beda0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000000a R14=ffffffff845fd740 R15=0000000000000000 RIP=ffffffff845fd7cb RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000c011c91000 CR3=000000001b042000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000001a4 XMM01=1ca4b281cf5501920392bdab545d925a XMM02=68aae03a905ced33ff2e3c80da230bc4 XMM03=cd28d68185468e779d980e403b4e34cf XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=1ffff92000939f8c RSP=ffffc900049cfc50 R8 =0000000000000000 R9 =ffffffff8dbb1697 R10=fffffbfff1b762d2 R11=0000000000000001 R12=ffff8880229e6938 R13=ffffc900049cfda8 R14=ffff88801b4f1b00 R15=ffff888011875800 RIP=ffffffff815d851b RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff1f0108d63 CR3=000000001a763000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ff000000000000ff00000000000000 XMM02=00000000000000000000000000000000 XMM03=0000000000ff0000000000ff00000000 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=ffff000000000000ffff000000000000 XMM06=ffffffffffff0000ffffff00000000ff XMM07=00000000000000000000000000000000 XMM08=65726168732f6372732f2e2e2f2e2e00 XMM09=00000000000000000000000000000000 XMM10=73737373737371f27373737373737373 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000003 RBX=0000000000000000 RCX=dffffc0000000000 RDX=0000000000000000 RSI=0000000000000003 RDI=ffff88802ca39f80 RBP=ffff88802ca39f80 RSP=ffffc90002fa7960 R8 =0000000000000001 R9 =ffff88802ca39f80 R10=ffffed10059473f0 R11=0000000000000001 R12=0000000000000000 R13=ffffed10059473f0 R14=0000000000000001 R15=ffff88802ca3adc0 RIP=ffffffff8134f1b1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555555ac5400 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2863fa0000 CR3=0000000072a07000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=fffff52000727ed4 RBX=1ffff92000727ed4 RCX=1ffffffff20d0e76 RDX=dffffc0000000000 RSI=ffff888070e0cac8 RDI=ffff888070e0c040 RBP=ffff888070e0caea RSP=ffffc9000393f668 R8 =0000000000000000 R9 =ffffffff9068190f R10=0000000000000001 R11=0000000000000001 R12=ffff888070e0cac8 R13=0000000000000006 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff815cffed RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2864c32700 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f2863b9c028 CR3=0000000075f98000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000019995a286e796b98 XMM02=00000000000000000000000000000000 XMM03=00007f2863b717c800007f2863b717c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000