Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:41603' (ECDSA) to the list of known hosts. 2022/10/01 15:45:59 fuzzer started 2022/10/01 15:46:00 dialing manager at localhost:35095 syzkaller login: [ 35.995406] cgroup: Unknown subsys name 'net' [ 36.093794] cgroup: Unknown subsys name 'rlimit' 2022/10/01 15:46:14 syscalls: 2215 2022/10/01 15:46:14 code coverage: enabled 2022/10/01 15:46:14 comparison tracing: enabled 2022/10/01 15:46:14 extra coverage: enabled 2022/10/01 15:46:14 setuid sandbox: enabled 2022/10/01 15:46:14 namespace sandbox: enabled 2022/10/01 15:46:14 Android sandbox: enabled 2022/10/01 15:46:14 fault injection: enabled 2022/10/01 15:46:14 leak checking: enabled 2022/10/01 15:46:14 net packet injection: enabled 2022/10/01 15:46:14 net device setup: enabled 2022/10/01 15:46:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 15:46:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 15:46:14 USB emulation: enabled 2022/10/01 15:46:14 hci packet injection: enabled 2022/10/01 15:46:14 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 15:46:14 802.15.4 emulation: enabled 2022/10/01 15:46:14 fetching corpus: 50, signal 22130/23950 (executing program) 2022/10/01 15:46:15 fetching corpus: 100, signal 31216/34708 (executing program) 2022/10/01 15:46:15 fetching corpus: 150, signal 39337/44379 (executing program) 2022/10/01 15:46:15 fetching corpus: 200, signal 49363/55764 (executing program) 2022/10/01 15:46:15 fetching corpus: 250, signal 54931/62690 (executing program) 2022/10/01 15:46:15 fetching corpus: 300, signal 62240/71144 (executing program) 2022/10/01 15:46:15 fetching corpus: 350, signal 66586/76750 (executing program) 2022/10/01 15:46:15 fetching corpus: 400, signal 70603/81964 (executing program) 2022/10/01 15:46:15 fetching corpus: 450, signal 73864/86377 (executing program) 2022/10/01 15:46:15 fetching corpus: 500, signal 75619/89390 (executing program) 2022/10/01 15:46:15 fetching corpus: 550, signal 79230/94029 (executing program) 2022/10/01 15:46:16 fetching corpus: 600, signal 82588/98365 (executing program) 2022/10/01 15:46:16 fetching corpus: 650, signal 85990/102670 (executing program) 2022/10/01 15:46:16 fetching corpus: 700, signal 93008/110081 (executing program) 2022/10/01 15:46:16 fetching corpus: 750, signal 95866/113753 (executing program) 2022/10/01 15:46:16 fetching corpus: 800, signal 98724/117419 (executing program) 2022/10/01 15:46:16 fetching corpus: 850, signal 102088/121470 (executing program) 2022/10/01 15:46:16 fetching corpus: 900, signal 103791/124083 (executing program) 2022/10/01 15:46:17 fetching corpus: 950, signal 106388/127402 (executing program) 2022/10/01 15:46:17 fetching corpus: 1000, signal 107466/129380 (executing program) 2022/10/01 15:46:17 fetching corpus: 1050, signal 108819/131603 (executing program) 2022/10/01 15:46:17 fetching corpus: 1100, signal 110982/134525 (executing program) 2022/10/01 15:46:17 fetching corpus: 1150, signal 112500/136850 (executing program) 2022/10/01 15:46:17 fetching corpus: 1200, signal 114385/139443 (executing program) 2022/10/01 15:46:17 fetching corpus: 1250, signal 115799/141601 (executing program) 2022/10/01 15:46:17 fetching corpus: 1300, signal 117629/144062 (executing program) 2022/10/01 15:46:17 fetching corpus: 1350, signal 119459/146503 (executing program) 2022/10/01 15:46:18 fetching corpus: 1400, signal 121352/148994 (executing program) 2022/10/01 15:46:18 fetching corpus: 1450, signal 123732/151808 (executing program) 2022/10/01 15:46:18 fetching corpus: 1500, signal 125148/153823 (executing program) 2022/10/01 15:46:18 fetching corpus: 1550, signal 127443/156459 (executing program) 2022/10/01 15:46:18 fetching corpus: 1600, signal 129517/158910 (executing program) 2022/10/01 15:46:18 fetching corpus: 1650, signal 131009/160856 (executing program) 2022/10/01 15:46:18 fetching corpus: 1700, signal 132790/163041 (executing program) 2022/10/01 15:46:18 fetching corpus: 1750, signal 134435/165082 (executing program) 2022/10/01 15:46:18 fetching corpus: 1800, signal 135972/166972 (executing program) 2022/10/01 15:46:19 fetching corpus: 1850, signal 138382/169440 (executing program) 2022/10/01 15:46:19 fetching corpus: 1900, signal 139398/170983 (executing program) 2022/10/01 15:46:19 fetching corpus: 1950, signal 140553/172636 (executing program) 2022/10/01 15:46:19 fetching corpus: 2000, signal 142068/174506 (executing program) 2022/10/01 15:46:19 fetching corpus: 2050, signal 143832/176496 (executing program) 2022/10/01 15:46:19 fetching corpus: 2100, signal 145186/178237 (executing program) 2022/10/01 15:46:19 fetching corpus: 2150, signal 146887/180082 (executing program) 2022/10/01 15:46:20 fetching corpus: 2200, signal 147790/181436 (executing program) 2022/10/01 15:46:20 fetching corpus: 2250, signal 149354/183211 (executing program) 2022/10/01 15:46:20 fetching corpus: 2300, signal 150727/184810 (executing program) 2022/10/01 15:46:20 fetching corpus: 2350, signal 151949/186325 (executing program) 2022/10/01 15:46:20 fetching corpus: 2400, signal 153600/188028 (executing program) 2022/10/01 15:46:20 fetching corpus: 2450, signal 154649/189405 (executing program) 2022/10/01 15:46:20 fetching corpus: 2500, signal 155404/190515 (executing program) 2022/10/01 15:46:20 fetching corpus: 2550, signal 156614/191885 (executing program) 2022/10/01 15:46:21 fetching corpus: 2600, signal 157501/193060 (executing program) 2022/10/01 15:46:21 fetching corpus: 2650, signal 158465/194286 (executing program) 2022/10/01 15:46:21 fetching corpus: 2700, signal 159217/195337 (executing program) 2022/10/01 15:46:21 fetching corpus: 2750, signal 160353/196638 (executing program) 2022/10/01 15:46:21 fetching corpus: 2800, signal 161426/197859 (executing program) 2022/10/01 15:46:21 fetching corpus: 2850, signal 162150/198887 (executing program) 2022/10/01 15:46:21 fetching corpus: 2900, signal 164033/200495 (executing program) 2022/10/01 15:46:21 fetching corpus: 2950, signal 165777/201978 (executing program) 2022/10/01 15:46:22 fetching corpus: 3000, signal 166449/202945 (executing program) 2022/10/01 15:46:22 fetching corpus: 3050, signal 167313/203949 (executing program) 2022/10/01 15:46:22 fetching corpus: 3100, signal 168199/205003 (executing program) 2022/10/01 15:46:22 fetching corpus: 3150, signal 168743/205820 (executing program) 2022/10/01 15:46:22 fetching corpus: 3200, signal 169487/206734 (executing program) 2022/10/01 15:46:22 fetching corpus: 3250, signal 170554/207831 (executing program) 2022/10/01 15:46:22 fetching corpus: 3300, signal 171425/208783 (executing program) 2022/10/01 15:46:22 fetching corpus: 3350, signal 172675/209912 (executing program) 2022/10/01 15:46:22 fetching corpus: 3400, signal 173163/210721 (executing program) 2022/10/01 15:46:22 fetching corpus: 3450, signal 173824/211536 (executing program) 2022/10/01 15:46:23 fetching corpus: 3500, signal 174734/212406 (executing program) 2022/10/01 15:46:23 fetching corpus: 3550, signal 175640/213314 (executing program) 2022/10/01 15:46:23 fetching corpus: 3600, signal 176532/214237 (executing program) 2022/10/01 15:46:23 fetching corpus: 3650, signal 177261/215011 (executing program) 2022/10/01 15:46:23 fetching corpus: 3700, signal 177995/215786 (executing program) 2022/10/01 15:46:23 fetching corpus: 3750, signal 179060/216716 (executing program) 2022/10/01 15:46:23 fetching corpus: 3800, signal 179630/217365 (executing program) 2022/10/01 15:46:23 fetching corpus: 3850, signal 180311/218096 (executing program) 2022/10/01 15:46:24 fetching corpus: 3900, signal 180869/218791 (executing program) 2022/10/01 15:46:24 fetching corpus: 3950, signal 181703/219562 (executing program) 2022/10/01 15:46:24 fetching corpus: 4000, signal 182392/220246 (executing program) 2022/10/01 15:46:24 fetching corpus: 4050, signal 182683/220787 (executing program) 2022/10/01 15:46:24 fetching corpus: 4100, signal 183966/221666 (executing program) 2022/10/01 15:46:24 fetching corpus: 4150, signal 184326/222235 (executing program) 2022/10/01 15:46:24 fetching corpus: 4200, signal 184825/222803 (executing program) 2022/10/01 15:46:24 fetching corpus: 4250, signal 185420/223494 (executing program) 2022/10/01 15:46:24 fetching corpus: 4300, signal 186107/224118 (executing program) 2022/10/01 15:46:24 fetching corpus: 4350, signal 187206/224850 (executing program) 2022/10/01 15:46:25 fetching corpus: 4400, signal 188930/225688 (executing program) 2022/10/01 15:46:25 fetching corpus: 4450, signal 189960/226344 (executing program) 2022/10/01 15:46:25 fetching corpus: 4500, signal 190508/226905 (executing program) 2022/10/01 15:46:25 fetching corpus: 4550, signal 191015/227421 (executing program) 2022/10/01 15:46:25 fetching corpus: 4600, signal 191331/227923 (executing program) 2022/10/01 15:46:25 fetching corpus: 4650, signal 191874/228492 (executing program) 2022/10/01 15:46:25 fetching corpus: 4700, signal 192745/229097 (executing program) 2022/10/01 15:46:25 fetching corpus: 4750, signal 193289/229593 (executing program) 2022/10/01 15:46:26 fetching corpus: 4800, signal 193684/230030 (executing program) 2022/10/01 15:46:26 fetching corpus: 4850, signal 194344/230539 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/230972 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/231378 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/231734 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/232090 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/232459 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/232846 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/233241 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/233597 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/233958 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/234313 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/234686 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/235070 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/235446 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/235822 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/236183 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/236567 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/236941 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/237325 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/237693 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/238059 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/238209 (executing program) 2022/10/01 15:46:26 fetching corpus: 4871, signal 194680/238209 (executing program) 2022/10/01 15:46:29 starting 8 fuzzer processes 15:46:29 executing program 0: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget(0x2, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/95) r1 = shmget(0x3, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140), 0x6e, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/199, 0xc7}, {&(0x7f00000002c0)=""/242, 0xf2}, {&(0x7f00000003c0)=""/24, 0x18}], 0x3, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x101) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000600)={{0x2, 0x0, r2, r5, 0xffffffffffffffff, 0x20, 0x3f}, 0x4, 0x3, 0x100000001, 0x9, r7, 0xffffffffffffffff, 0x1ff}) r8 = shmget(0x0, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_INFO(r8, 0x3, &(0x7f0000000680)=""/211) r9 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil) shmat(r9, &(0x7f0000ffe000/0x1000)=nil, 0x6000) r10 = syz_io_uring_complete(0x0) r11 = accept4(r3, 0x0, &(0x7f0000000780), 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) getsockopt$bt_BT_FLUSHABLE(r12, 0x112, 0x8, &(0x7f0000000840)=0x5, &(0x7f0000000880)=0x4) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000008c0)) shmat(0x0, &(0x7f0000ff9000/0x3000)=nil, 0x5000) 15:46:29 executing program 2: ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040)) r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) r3 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x9, 0x2, 0x4, 0x4, 0x0, 0x20, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xfffffffffffff800, 0x1}, 0x4, 0x0, 0x6, 0x9, 0x10000, 0xfffffffb, 0xb4, 0x0, 0x5, 0x0, 0x4}, r0, 0xb, r2, 0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = eventfd(0xff) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500), 0x80000, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540), 0xc00000, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000000580)={0x5, 0x80, 0x5, 0x8, 0x40, 0x3, 0x0, 0xffffffff, 0x2, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x4, @perf_config_ext={0x1, 0x25fb}, 0x0, 0x1, 0x7, 0x9, 0x3f, 0x1000, 0xffff, 0x0, 0x9, 0x0, 0x101}, r2, 0xc, r1, 0x0) sendmsg$unix(r2, &(0x7f0000000680)={&(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000001c0)="b1f743194b71185f2934ba9745cbe627537e1bf76f99ed9db11f9b30a0f24f91434bc823003416743aa4743e8cc5fdd7a055a3112d94adba72acf7f0dc903fc753cb0e4f4198bfd249c67d271e13eb57bab5f28faad6197aca0295c5036ff44acf99961e25064e7307d56a2c2390e6ce036978b32ec26a7bbd867c0327f0297b5071f22374294c55d7b08a08e3883d6cfbc110877b432ef8a42df33a3842fdcbd373ffd0195d24c8636c4f10aa5a00efd67d4d7e1a231ca12377a8ff54eb45fab94805f5230052234ee8b021ec53b0a77baf5ccf4c1f", 0xd6}, {&(0x7f00000002c0)="db402d309ef6e49b049e7aa74948b97d1258cacb8716ea98242214623ae14e79207a067f7599288a6db57bd7fcfb1dd0ba053bf86833642538ab693361d93c992788f8ff1d25d96fcbb15ccc30618675b99237c13941612f7f23c882b712284dc0db049ea8314510a0ae7a183bbad8f7e22e3389adde126ad805c8a352a88c117c67ed6126841cc287b949e966531dd81c8e34b32ade740ad936b05843c2423c0a376009d569d4f84e943ba6ea7cfac5fb2cb00b937d", 0xb6}, {&(0x7f0000000380)="a391fa0a05b1d9c2ded04d45f38ec99fcf2042823a40d6f64b0b45eb8929c16c1391b7df063c454799acc4d4e0f7aaae5f3fdcae60c0e592110798135cfc11dc8b70c78b0823ffdb2e767ab59d8cf637592486f1feefb003fe6ee5f3c0b15adc786fc4d8d9881c57d30832687a2d97b67e5ebc7d839666a6c8b7d3095b6f869c1c92eb162307264250f59a7213a6c2fd30354d852f5f329d294846ec819064aa29d0c176c7c4e7cfbf211114afbbf7498d0d537012f1364c71d0f109a48936b8a31395acb494575fbacdf109849009aef25139bbb1d2c1cb14acb8474ed79add7e29e3d603043c744d2e2603bb22bfd3fc37e56eb7fc", 0xf6}], 0x3, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r4, r3]}}, @rights={{0x28, 0x1, 0x1, [r5, r3, r6, r7, r3, r8]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee00}}}], 0x80, 0x20008000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) preadv2(r9, &(0x7f0000001bc0)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/37, 0x25}, {&(0x7f0000001740)=""/105, 0x69}, {&(0x7f00000017c0)=""/161, 0xa1}, {&(0x7f0000001880)=""/203, 0xcb}, {&(0x7f0000001980)=""/30, 0x1e}, {&(0x7f00000019c0)=""/151, 0x97}, {&(0x7f0000001a80)=""/160, 0xa0}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/49, 0x31}], 0xa, 0x9, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000002, 0x10010, r6, 0x310d4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r7}, './file1\x00'}) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x8, 0x20, 0x2, 0x5, 0x0, 0x10001, 0x2060, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000001cc0), 0x5}, 0x4a019, 0x8001, 0x5, 0x8, 0x7, 0x400, 0x1, 0x0, 0x6372, 0x0, 0x1}, r0, 0xe, r8, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001dc0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r2, &(0x7f0000001d80), 0x0, 0x0, 0x80000}, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r10, 0xc0189373, &(0x7f0000001e00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file2\x00'}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000001e40)) ioctl$SCSI_IOCTL_STOP_UNIT(r10, 0x6) 15:46:29 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x10d400, 0xc8) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)=':^\xf0]\x00', 0x0, r1) fchmod(r0, 0x8) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e24, @multicast1}, 0x2, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)='ip_vti0\x00', 0x40, 0x8, 0x8001}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000200)={0x0, 0x1, [0xffffffffffffffd4, 0x9, 0xfffffffffffffff9, 0x6, 0x5, 0xd0d]}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x100) fcntl$setlease(r3, 0x400, 0x2) write$binfmt_aout(r1, &(0x7f0000000280)={{0x107, 0x81, 0x9, 0x2f1, 0x5c, 0x6, 0x2bb, 0x3}, "27ce8dadef0431a072198d535841e253e1c93688a21de6367f5821665c1e02ae0214ca64b89607ece9d0d46adb5e5903bf1c51666e392da4c1d767e92fdece47f6330cddedad97da26142192bb86f566ace68dea1fd2c32d73b45fa28007a870b1a8f9a134d868e8317cb4961700c6de1d4f11f435d2e72e5306731912721a2e09a5c361566d595bd86c4799985f57e958714cdeee56427a1aa1616c60a86b74efae5acdfa0dd827b15c4a0f44ef27a8fe", ['\x00', '\x00']}, 0x2d1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000005c0)='/dev/snd/seq\x00', &(0x7f0000000600)='ip_vti0\x00', 0x0) r5 = openat$incfs(r0, &(0x7f0000000640)='.log\x00', 0x402, 0x20) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000680)={0x8, 0x1, 'client1\x00', 0x2, "70a9be7be766840e", "243e0cdc395bdf4e2670b8251f1b858135bc244b3d5bc9bcd2d237be084d9447", 0x81, 0x7}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000000780)={0x9, 0x1, 'client0\x00', 0x8000000040000005, "9b6b80fe0e0c3902", "ba1cc5eb4fbcf192f32b181802e33acead098ddf5028c3ef2837a2d033686a7e", 0x6, 0x4da}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000840)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = dup3(r0, r6, 0x0) fcntl$dupfd(r8, 0x406, r3) 15:46:29 executing program 3: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0x2c, 0x20, {0x20, 0x31, "3e8f4191e913cb253e43a9d257990a43aa4bf853a326f92c212dad772364"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}}, &(0x7f0000000340)={0x44, &(0x7f00000000c0)={0x0, 0x0, 0x99, "c8387fd9e6a090edc5198ea14782f35b1a7172d1cbff3a1571d682a44787bdfd61c38911e3e206191a5adcfff911596338cb558e4aafd6fcbbf09ed1837a59ec8707379a88ea752ac33aa177aa490cb71f828766518b9e9415ce0547a6038b7afdd502aae76881124916737a5a9196e9af5dcb721ec438846fb0a4948cfef979d84644ea046b1302c28e42f52e6fbded014d0f65bd535084d8"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000200)={0x20, 0x81, 0x3, "770446"}, &(0x7f0000000240)={0x20, 0x82, 0x1, "eb"}, &(0x7f0000000280)={0x20, 0x83, 0x2, "db90"}, &(0x7f00000002c0)={0x20, 0x84, 0x4, "0f181aad"}, &(0x7f0000000300)={0x20, 0x85, 0x3, "1cf0c6"}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f00000003c0)={0x0, 0x24, 0xfc, {0xfc, 0x8, "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"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000580)={0x0, 0xc, 0xc5, "2e21553f12d3e65678fa94047828cf0c305a10dcb1368ef800c6c79406ec7252cf14e5eaf321ba1df42017069cc7f20c18e76333bd921de4c58ebe556bf7318649a23cfcf7b8745340446f0180e0fe63bc295a12a6d1eee371b489c91268358e731bad16de2f915d5f8db9d9b5cd93b9ef341cc7b0c954a3992c195019b90696b017a03af06976efdfa812884e69ab6bfabf1f7a027c7432efc85ab0de77077021b6284ffd1755fa9881b232bc5db642f6bd4cd415d5ed50c505bc92ed79ce407fcdaac800"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xa1}}) r0 = syz_usb_connect$cdc_ncm(0x0, 0x79, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x2, 0x1, 0x0, 0x50, 0xe9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, 'Sx'}, {0x5, 0x24, 0x0, 0xe7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7ff, 0x4, 0x81}, {0x6, 0x24, 0x1a, 0x4, 0x30}, [@acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x81, 0x1e, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x40, 0x8}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x110, 0x1, 0x55, 0x5, 0x40, 0x1}, 0x38, &(0x7f0000000800)={0x5, 0xf, 0x38, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2d637e6c51f7740cf541515efea6e1ea"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x72, 0x7, 0x3, 0xde, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xfb, 0x1f, 0xfbff}, @ext_cap={0x7, 0x10, 0x2, 0x1, 0x4, 0x9, 0x200}]}, 0x2, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3c34}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a40)={0x14, &(0x7f0000000900)={0x20, 0x1, 0xf0, {0xf0, 0x23, "15aa2adbd4f3874a96899f34ca44840cc31e3e1ba707c7c17dc01b1fc5b03425779f01454cdd9cea481571707e0b167c163078666bcaeac8fe6854e6194c041b67c13fa017e9724bbcc0dd77396abebf1d33f9899988f500311c9da2fc630d73356d8307194c000be6a929bdf21ab3a13f0d038e518f0e2c15e3f25267fbc283c99c79dacd327ea3a46decd978f46b84577128cd6d28f17014d15c585239af3309f35f23c39ea5d3cecf188f32eab939b03b4d886a0fd6741cc80791ffffd24b912e295da1996c01bd6741d21f0aac146173b3bb3902928861b6f872c34c6b98e22781d93a265b09dd601bbebe6c"}}, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)={0x20, 0x15, 0x5b, "ed77947b2d2b797ff79a7f26ead82788ec0a8c4727e341c3a50c1dbc7e71442715c2a0aa3a89d04a6e820215a4becfae99c8ea09f118401381049656387b064eefb124d6615e96cc9000ea990b13fbeccb57e9b4b13d1c0a58564f"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b80)={0x20, 0x80, 0x1c, {0x4, 0x2, 0x8, 0x800, 0x100, 0x1f, 0x400, 0x0, 0x800, 0x5, 0x4}}, &(0x7f0000000bc0)={0x20, 0x85, 0x4, 0x7ff}, &(0x7f0000000c00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000c40)={0x20, 0x87, 0x2, 0x8}, &(0x7f0000000c80)={0x20, 0x89, 0x2}}) syz_usb_control_io(r0, &(0x7f0000000f80)={0x2c, &(0x7f0000000d40)={0x0, 0xf, 0x91, {0x91, 0x22, "c5b2e2acf130d9421bce1bdeb9ca727356e27e0264a439f4acbc6a0b19ccfcbddd45d32fc2c7cafe6dd5987d2f8aa7583ca61ea236440d95c93daf7a4d39726dc74728ebf226c9d02ce47bd9569005ee6cdefa73599845b58399939280d65d573397057a5b625aa6d7772af78e7fa4f2f7a180d357790d726acbf6f5022875e0206b621f6d8d76543968a468a25795"}}, &(0x7f0000000e00)={0x0, 0x3, 0x92, @string={0x92, 0x3, "f1fde0a1e62a7849a32ff15af03574c07b1ca6cab4615286b4dc51295e2c5fbb69764ee1c3448a92e8aecc068285d4b678a1325d423c97e720d4e54a8aff92094b6cc0ffefd4037f3aef6713bd1deea092d182e0180efe41ecf4e2dc45fc803d702a90207cc309810384a2d3cfa8277cc5b2a02c8986b885a5959f17b3612cbc7923af7ce689bbf557ae36f6cbc70a4b"}}, &(0x7f0000000ec0)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0x40, 0xfffd}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x6, 0x8, 0xffff, 0x5}]}}, &(0x7f0000000f00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x85, 0x0, 0x5, 0x6, "64833892", "86ba1a1c"}}, &(0x7f0000000f40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x2, 0x0, 0x5b, 0x4, 0x1f, 0x81}}}, &(0x7f0000001480)={0x84, &(0x7f0000000fc0)={0x20, 0x14, 0xda, "207dc75a1b766d723c6e0da4193f4ad88199d3a368e01ca147798ccb69553883b277bd9afcc81c9c62a1bc61d904adefec881c7d4a62f1037f9b0723177ffd2a5df0db703abb1a19ee67a5be399f2dab378df0f72e1fb6fec359f6746f898d4067d4b8de6a1c95af0a2d56c3a3ef8a409eab4f20ebe3c053d85073880ba86daa98c7620a2dfd28828707f7877d914d5817e1aadf03f7eb17380dbabd48e5d0df1e0d36d170e1a162b565ceae9aa972e0176bd393fccee2f65ae650d78a8045aad2528a1e3b0d8adba67f802b391cb5c2735c53c36139be7802b9"}, &(0x7f00000010c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000001100)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001140)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001180)={0x20, 0x0, 0x8, {0x1200, 0x20, [0xf00]}}, &(0x7f00000011c0)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000001200)={0x40, 0x9, 0x1, 0x3f}, &(0x7f0000001240)={0x40, 0xb, 0x2, "846a"}, &(0x7f0000001280)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000012c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001300)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001340)={0x40, 0x19, 0x2, "c332"}, &(0x7f0000001380)={0x40, 0x1a, 0x2, 0xfff8}, &(0x7f00000013c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001400)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001440)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001700)={0x24, &(0x7f0000001540)={0x0, 0xd, 0xd7, {0xd7, 0xd, "9709e95a9f7aa3a806ad3a98ac1727734a861350ddb9b479882b73b0cad93a4444016b7574be24e9339d9e1b8664e2b438559ec98f4e629e5a06195283f0905955a444a3fd4d8150efdf047d3d131d4d67284566dbb73d5d3b56e0cbbf1d3a98a3704bdad86013e77aa8bbc4639cab65cda807e546f975ec314ec3035562d1c9d7c6ba40bcb7b1f6604c78aae2e0ed272ec6811fba077f8adb3e59f51534373b5eae2b18c7bfe88940f2ac16903c5b0cd8c3391487bf2574a09a779f0bb4df61f9faf2acb6ef7a7987b97e516b3ee3d42eb56b262f"}}, &(0x7f0000001640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}, &(0x7f0000001680)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x7, "a7fd5398"}, @global=@item_4={0x3, 0x1, 0x3, "2325d2e6"}, @main=@item_012={0x1, 0x0, 0x9, 'K'}, @local=@item_012={0x2, 0x2, 0x8, "dd03"}, @local=@item_012={0x1, 0x2, 0x0, 'G'}, @main=@item_012={0x2, 0x0, 0xa, "52d5"}]}}, &(0x7f00000016c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x1, 0x1, {0x22, 0x69}}}}, &(0x7f00000019c0)={0x2c, &(0x7f0000001740)={0x40, 0x10, 0xbc, "dd2885a3c2963d75de6e4e821b5af2a3f6799c02c34edc6b6058ae4d17628b85349a9bdfb5815c4785964055276e19d979db837d734f6ae70f3184c91c0a7129314a450f40891f511a8c71ba13451eeaa6395c4a1d718c9246d6ec04eb281f2a630b2743e489f47c0ecae1c399b75caffc466245be3a7f6eaf4420c077c9b5f66876ddc6c4a9f66f2310e181f694afa2bf521515e3ea696873f4ad137c1aa0db0f34176d9875eceb9f8c06d0f9cef9fcd4165272df9a9dab2b22b5c8"}, &(0x7f0000001840)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001880)={0x0, 0x8, 0x1}, &(0x7f00000018c0)={0x20, 0x1, 0xa9, "c47ab75a9997b53a305a37c8919dfd2a54e803b310463bf664b38778d9a5576747bcd824458f8d4f73402de66f6ec92dc0f8feb13e7f551f686e7a8b2ca868737623c12d1286c64334eaac29066e7e4cd48110a5eb1ded570e085f5c88af0fa3ada8e522f2065f16fcff1e6cc8d738f313bd1f84e9e9c3280bf86421683791d60ce5839aae09186db3b9e778d466c80f7b008f008ec06fda1396c5cc0969663247b07350884a64abb9"}, &(0x7f0000001980)={0x20, 0x3, 0x1, 0x81}}) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000001a00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x610cbc7beff71665, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x0, 0xfe, [{{0x9, 0x4, 0x0, 0xc2, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x81, 0x5, 0x3}}}}}]}}]}}, &(0x7f0000001f00)={0xa, &(0x7f0000001a40)={0xa, 0x6, 0x300, 0x7f, 0x3, 0x0, 0xff, 0x6}, 0x11d, &(0x7f0000001a80)={0x5, 0xf, 0x11d, 0x5, [@generic={0x97, 0x10, 0x3, "09019a6391848c98f548a96626c0f93fbbf67093c58b8c17f5eee086e83b61a5270583797423b42a409f7e6e07c36ed313c73e59dd06095caacb1d8ca4d933686842ed6b8023b1af62780dbb5e543de42dc7df985c9500e1f840be8bf1c5bb32f0c599fe2d6d11806eff92894531eb7ff6dc023b03d2c60abe881702534e6b2bcf33c2e4dc2f94ee9acce38f29d1e592ea42fac1"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xe8, 0x8, 0x2, 0x320, 0xe0}, @ptm_cap={0x3}, @generic={0x5f, 0x10, 0xa, "51608df07a4767e3343ebe4bec02fc869ee0749655333b1d6611a1b374da722a5f1a8713498f625dd06f36717d260e1a2dd239bf3b579db6aec09962bd5f0ae8be18702596af2e0c221596076b5d607d896d0b9a1b45c05ea56addac"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "0dd3ada1cc2db7e676657c567fefbb57"}]}, 0xa, [{0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0xcc551da86a92b5e1}}, {0x4, &(0x7f0000001c00)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x455}}, {0xad, &(0x7f0000001c80)=@string={0xad, 0x3, "c96545267a19f61f513101ede18c586ef4c607cb5f2da2f13f6fc9711bda9b5e3f242bd5d685f791c0bf9cccf72eb4e1882b41715013de4098bcee713cc23ad7921f6c8c3e389b43b205822f30fb8eea60668905ddb153ad74f1fb46e4248b1b7627c71364c472441f828c8e275aaec465cd9dbc3e715f91dad06208bd37c983bcd277a98ade991101400392cc8fedaac583906772ff88755e68e6cb4ffde7a8617cf0169f7c00e9cb9916"}}, {0x76, &(0x7f0000001d40)=@string={0x76, 0x3, "78a2c121f82ca25b649b0b7b44d7c82bee5d49860769874fd30385685dff8c3efe4c954c44abbd7d809bb83d23bb391f4054ae4f996f9d11b39c7434f9c75c2ae760e1ef8f3d29152f0a254eeb1e5cad50ee4ece843f42d9aa87f0d4611f2b677f5be9d2be6f619f8577f2fb2d9c83c802b95193"}}, {0x10, &(0x7f0000001dc0)=@string={0x10, 0x3, "28ab2b1743e01fd8b448df001625"}}, {0x4, &(0x7f0000001e00)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x100a}}, {0x35, &(0x7f0000001ec0)=@string={0x35, 0x3, "3ba1b1a9fe105abf145ec26d82bdfb89e6d6f2113865b6b779d5e9251aa395d994d3c304ce65b3770e1e36b1ff68a064c6fdf9"}}]}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000002080)={0x14, &(0x7f0000001fc0)={0x40, 0x0, 0x56, {0x56, 0x1, "6bf2284ea76254f587bb89e14b720eed083c50de7cfd19e8c650a803345dcb0a48ce1724068977732eabe9673131cfce992f81f5d768f677ca1a6a699c9cbed82a00481bea251f53d3b3d7d5a4355ded941ac6d9"}}, &(0x7f0000002040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c44}}}, &(0x7f0000002340)={0x44, &(0x7f00000020c0)={0x40, 0x17, 0x96, "368d9cb0686f5ab5fcf676b632d2dcbb675c2c7bfcbbcb3850a0987a2f02e9a1b0fb713dff904bd54cf844fac6953d309f5fefd17d4f0865fbb2a478f4f926e136807f8faccc6928ac4ba6c0cf8d8938bc3732c002db00fd3b4c6cccb7348a885ab789c8318002d7d1911433294a45796b5e8c6583c46a31aba6c200bfdc41d9f177a53d9233829f5c906e64fcabd525404433675d82"}, &(0x7f0000002180)={0x0, 0xa, 0x1}, &(0x7f00000021c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000002200)={0x20, 0x81, 0x1, 'n'}, &(0x7f0000002240)={0x20, 0x82, 0x3, "15d050"}, &(0x7f0000002280)={0x20, 0x83, 0x2, '8k'}, &(0x7f00000022c0)={0x20, 0x84, 0x2, "e321"}, &(0x7f0000002300)={0x20, 0x85, 0x3, "569566"}}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000002440)={0x14, &(0x7f00000023c0)={0x0, 0x2, 0x8, {0x8, 0x10, "8a46835bbb68"}}, &(0x7f0000002400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002740)={0x44, &(0x7f0000002480)={0x20, 0xa, 0xd4, "7b5220b9e77670692f6628c0beda845c02ebb3c4d8a61cb535009f14ec836bf4c213fc83b4b47f682800131aa9fb9873095b0cdab7ba83b0383b209982f09b0480cf14546fe226772dc0dc88050087745651190f52c9e247f56576c3583934bc3d89cb760e3f2a775cf72c99d1467acdfb2ad8cf35cf71851e6bafd20c405a2c2dee1472340cdd932579818402654a4774d1b69db43b250f8ca8ec56a00acfcaa478019596a80feef461e1f5dd666edce26ea1a62024ef497fdfddf20c472f9d397b43effca928aaa9e48865f30f9d1ecaeded94"}, &(0x7f0000002580)={0x0, 0xa, 0x1, 0xe1}, &(0x7f00000025c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000002600)={0x20, 0x80, 0x1c, {0xd487, 0x8001, 0xffff, 0x5f, 0x9, 0x5, 0x7, 0x40000, 0x1, 0x4, 0x8df6, 0x43d}}, &(0x7f0000002640)={0x20, 0x85, 0x4, 0xff}, &(0x7f0000002680)={0x20, 0x83, 0x2}, &(0x7f00000026c0)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000002700)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io(r1, &(0x7f0000002980)={0x2c, &(0x7f00000027c0)={0x20, 0x23, 0x3f, {0x3f, 0xb, "527256872f5053fed1cfbd78db7e8201262bc794e9b9340081a9e11be5dfb824a7968d12b21e9cc253fe37b8123619dcedd29c8c2f7926330f39c9490e"}}, &(0x7f0000002840)={0x0, 0x3, 0x41, @string={0x41, 0x3, "516eb04227752f91ae6206460c277c036d73f876f01fc164233147aa2b93a2f8b8666b182eda6e5e54ae77a43668a5248d49066fcb90771946efa1150871ed"}}, &(0x7f00000028c0)={0x0, 0xf, 0x31, {0x5, 0xf, 0x31, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x9, 0xa4, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x9, 0x7fff}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x1, 0x4, 0x401}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x5, 0x7fff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1f, 0x7, 0x93a9}]}}, &(0x7f0000002900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x8, 0x2, "cea22f01", "767a0d82"}}, &(0x7f0000002940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc1, 0x80, 0x7, 0x0, 0x1, 0x80, 0x7}}}, &(0x7f0000002e80)={0x84, &(0x7f00000029c0)={0x20, 0xc, 0xc4, "72866296f0fe0f3dcfdacce2540874e67eb977f4843ec483f7d9141b968c735333feeea0800e64297880ee1b5618989bf0dbd697c183ec401422e6acc45882fe4a4c1feaad41a3b3ec09264d68fd177369eddeb6f7909dd18e396030f86c8fb5462181e1af6727f3b715602332b278b971dbdc21496ab6ef34d7a221d9fe6cfbb00e3a1afa215ba8b53ba62fa011eee1ea70d1f731fdb35423eb36b414502df1ed87c35e9ee2024ece1b0e55ec3c3fcdb36576be3887ab494f8a1dbb43b423a4476c1ab6"}, &(0x7f0000002ac0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000002b00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002b40)={0x20, 0x0, 0x4, {0x1, 0x3979213e52361442}}, &(0x7f0000002b80)={0x20, 0x0, 0x8, {0x800, 0x21, [0xf0]}}, &(0x7f0000002bc0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000002c00)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000002c40)={0x40, 0xb, 0x2, "6de3"}, &(0x7f0000002c80)={0x40, 0xf, 0x2, 0xa5}, &(0x7f0000002cc0)={0x40, 0x13, 0x6}, &(0x7f0000002d00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002d40)={0x40, 0x19, 0x2, "f2fa"}, &(0x7f0000002d80)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000002dc0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000002e00)={0x40, 0x1e, 0x1, 0xfb}, &(0x7f0000002e40)={0x40, 0x21, 0x1, 0x20}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000003040)={0x14, &(0x7f0000002f40)={0x0, 0x4, 0x89, {0x89, 0xd, "0fe952c6b782e810725ccc124066513a65b6644ec51c9ff76163ae5cb60e21a4bd6f5daa476fa9e3c0304e68a1e555462f15ebf3919dba98562a7e221bc3d38aeb909cca77e16feae27fba05c671dbdc382c1bd49e891e1c5024c7b03acd4b3e85252472985964420b6f5b3c51b9f830a9e14996f170009f639ffa31f1f62eb74bed7ad7ed0a96"}}, &(0x7f0000003000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003300)={0x44, &(0x7f0000003080)={0x40, 0xf, 0xaa, "a3b0ca300b746dddcad66b817e3767030ebc6f99ea7e536cca49928ac0f76ecf5528313901f151cdd38e777866d51c30d7a7f2f81e2a92705b8d9104a11d999d37f93858615a6c1932218bf31633cf75d4517f2fe62f68991e2048b280adc018ca85d7cf44d419a7f43e178b87e69e4cdda71409e3eb83cbc288532fc06b942de48376ab009ba4d8a54fc3c0c74d554cd5596ed12e4603652bf5a05e3464e1e80bf3a1bdd54ce5f51539"}, &(0x7f0000003140)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000003180)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000031c0)={0x20, 0x80, 0x1c, {0x7, 0x7, 0x9ce3, 0x7ff, 0x9, 0x80, 0x0, 0x93, 0x1, 0xe2, 0x1fe, 0xfffa}}, &(0x7f0000003200)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000003240)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000003280)={0x20, 0x87, 0x2, 0x6}, &(0x7f00000032c0)={0x20, 0x89, 0x2, 0x1}}) r2 = syz_usb_connect$hid(0x7, 0x3f, &(0x7f0000003380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x21d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0xfc, {0x9, 0x21, 0x100, 0x42, 0x1, {0x22, 0x6dd}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x9, 0xe0}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x2, 0x8}}]}}}]}}]}}, &(0x7f00000035c0)={0xa, &(0x7f00000033c0)={0xa, 0x6, 0x201, 0x0, 0x5, 0x1f, 0x10, 0xf}, 0x5, &(0x7f0000003400)={0x5, 0xf, 0x5}, 0x2, [{0xc3, &(0x7f0000003440)=@string={0xc3, 0x3, "8da6dce5b5399d6ed4d3283ecff6fe24890e238bad19eb22cad34139fe279e543d1e5397b8b1bae233e6dfefb7f49c312ff287a5b18edc497074e57f7682591f91374afcb1189c8acd8774e2ca0b31e5ffc50ec1c9f96e4fb60cf14c9cca661863e50f0651710796467948d4bdc4ec2f57c6121839bbeef5b0b2129489fc29667790f86dba7bfdf09e93963067c4fef062a5e4e120233520caf52a372029e5f14998e13988e8bd68bfd6d399089f3181a5bfd1be74455b368e102db4f5580e7392"}}, {0x7d, &(0x7f0000003540)=@string={0x7d, 0x3, "4c0245925f3143c08c601c343c7bebc94b357f4bae236589efe9fb51eb56fa3769047be216c50e9a6684542480a9c3b612369d640c4c30abea2f184cb6c464ad20947b7db3123572439d2ae2f3b13e230accb5d7395334705533896af72f7f4ed6c06eafc85673886dbc0aa921495eebcaff290821934f7b5a5e5a"}}]}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000003700)={0x14, &(0x7f0000003600)={0x0, 0x21, 0x8f, {0x8f, 0x22, "c6247e3795c21cc844ebbb74d9ef09b5d1bbdb1c91da5ce3286b0926cb59735db3855e57133e1b08b61303715d14be4db8b47b728c13eb23f4ba2081d32bb31263db28a05265ca0b9b44007f04c05d99c4f457423310dfe9b4dd803505bf9c65e03a4a7b20a6b363addf6ac27110fd58c1b5ca562dcb5cb6f3f237a071bbab24b9afb5ecca41ef97f0172116ed"}}, &(0x7f00000036c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003800)={0x1c, &(0x7f0000003740)={0x20, 0x5, 0xf, "05ed0a425c3e7f286b0a243bf1d30c"}, &(0x7f0000003780)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000037c0)={0x0, 0x8, 0x1, 0x2}}) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000003840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x4f2, 0x1421, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfe, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x2faf, 0x2, 0x1, {0x22, 0xc5b}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3f, 0x1f, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x2, 0xcb, 0x5}}]}}}]}}]}}, &(0x7f0000003980)={0xa, &(0x7f0000003880)={0xa, 0x6, 0x200, 0x68, 0x7, 0x0, 0x20, 0x6}, 0x59, &(0x7f00000038c0)={0x5, 0xf, 0x59, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x46, "10b1a9368f5a6fa5191fe63a25e4167c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x61, 0x8, 0x3a, 0x43b, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0x8, 0x1e88f, 0x2, [0xc0cf, 0xc000, 0xc00f, 0xf, 0x3fcf, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x9, 0x8}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x9, 0xffff}]}, 0x1, [{0x4, &(0x7f0000003940)=@lang_id={0x4, 0x3, 0xfcff}}]}) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000039c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x4c, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x40, 0x3f, 0x1, {0x22, 0x7b5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x80, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x40, 0x7, 0x6}}]}}}]}}]}}, &(0x7f0000003bc0)={0xa, &(0x7f0000003a00)={0xa, 0x6, 0x250, 0x4, 0x5, 0x0, 0x40, 0x2e}, 0x120, &(0x7f0000003a40)={0x5, 0xf, 0x120, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "881d06b7de5ad55c19df99819aeb9445"}, @generic={0xef, 0x10, 0xa, "b551a218870a458b6493f5db32da1f55e34436c2480392b7d7bec8ca0b931da08b509dc6759789930d99bd839b079a090e34fa5c410bf3df67b9d3c68e6dc1b825335b0710c994c905254e66c8124c1b6fb914682482be12e3045616a7a927d9f1da1d17e5a014b0f7bc5e52cc8a9624defe6747b66456164e6f483970827a7dbf42069b78f69821772fa561a952f163181184407dafa9b4d0eebdfd6e6f351553f83630a3a1b6c5db3b401ef389f423c5c2be1880a55055c909c962b3e8b272720a57b0b8ebd5b6dad13d1a91d24b643e282db80891c90ba8304ffd4536daa03fbc4f5005d9d07b0f54497b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xd3, 0x6, 0x2, 0x8, 0x60}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x7, 0x1, 0x7fff}, @ptm_cap={0x3}]}, 0x1, [{0x22, &(0x7f0000003b80)=@string={0x22, 0x3, "d18cf5137a8a9e8995ee334eade58211ab2b550d94faa850187f74788f520e2e"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000003d00)={0x24, &(0x7f0000003c00)={0x40, 0x31, 0x9, {0x9, 0x11, "494b9db51cce54"}}, &(0x7f0000003c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, &(0x7f0000003c80)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x8, "93e3cc8c"}, @main=@item_4={0x3, 0x0, 0x8, "0a6cef49"}]}}, &(0x7f0000003cc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x93, 0x1, {0x22, 0xe31}}}}, &(0x7f0000003e80)={0x2c, &(0x7f0000003d40)={0x0, 0x0, 0x18, "96428ec2481146e38eaf59444fca68937af9391de05f5549"}, &(0x7f0000003d80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003dc0)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000003e00)={0x20, 0x1, 0x9, "2df74dc9cd6178e01b"}, &(0x7f0000003e40)={0x20, 0x3, 0x1, 0x1}}) syz_usb_control_io$hid(r2, &(0x7f0000004000)={0x24, &(0x7f0000003ec0)={0x0, 0x2, 0x62, {0x62, 0xd, "4cfded094fe63704cc3d65b71938f6563b09e6eea9e1e0788dba0deda7f1bd09b02798b05c413acc9ae190df3d26cc4c9b053fe793260831a0299ef715115bd88e31eef62988aeb2886b50e9d7a37d2316891ee3f31f1731fadf33921ab0faf2"}}, &(0x7f0000003f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f0000003f80)={0x0, 0x22, 0x6, {[@global=@item_012={0x2, 0x1, 0x3, 'Bw'}, @local=@item_012={0x2, 0x2, 0x9, '=A'}]}}, &(0x7f0000003fc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x51, 0x1, {0x22, 0x8}}}}, &(0x7f0000004180)={0x2c, &(0x7f0000004040)={0x40, 0x10, 0x21, "d301b94e4614040c1a8192743a7901211b46421a9deb7c5a39ca718e701929af36"}, &(0x7f0000004080)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000040c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000004100)={0x20, 0x1, 0x2e, "6c50a78fb98ba2b30e0724f9cd504522b448a7ecec80e8b0e2dee5b95eca502c4258a2d113f1a436cf3008dba4ab"}, &(0x7f0000004140)={0x20, 0x3, 0x1, 0xfd}}) syz_usb_control_io$printer(r1, &(0x7f0000004300)={0x14, &(0x7f00000041c0)={0x20, 0x14a9be67189d4cb6, 0x2b, {0x2b, 0x5, "1aeac1b8b961bc04718ac9df186b7f7ce31c9da0de1063a27b51adb590276920513e4ad66b1b9bdc52"}}, &(0x7f0000004200)={0x0, 0x3, 0xcf, @string={0xcf, 0x3, "2e9746816e743c4502cf237016286f75f551105d5e3f87ef1c0e2edebac572d31ed631ab6af9b77197950a41fea059532e14ad37e580b7cf7ee9fd613431b2dbacd89f2e65e01a8459bd9eff74badf9e19ff766ab3561e250fe73ca872b8d30ef3e7d135ec0945702ad6ec3235c8f7eee73fe3ee518d595593c053a2b90cf51451b55779c592166a6a9b520dde3eb0c45a97e4852e65bd9a65e8518daf20638569157bdb7e418d01e9c2a80b3275ab8e3b32e2fa9e1e326d319480803ba0f409d7b64c92c81d06bf1ebe6e3909"}}}, &(0x7f0000004580)={0x34, &(0x7f0000004340)={0x40, 0xb, 0xb4, "0ff54b8a6d5626b35efa0568302bcba1d8150c380094a35227e425cf5e3d72cf75238d407eae64f92c9d3b38e0ba01d2e01fea0115862725ee828b5562e627e348b12b23161767b25bc085f6f0e33057dac8c04aa4affaea23cdb0aae14b97a0c7ab6a9d986e6489ed3c68d377e0572d9c86cc851a897f2afbb5b784c30da371ef99dea74cf94f14f2a770321439dcb20b053caa8bf0e6a872ef7764a31f9ccd3489d21130342f55abfde2217b968268fe70da0b"}, &(0x7f0000004400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000004440)={0x0, 0x8, 0x1, 0x69}, &(0x7f0000004480)={0x20, 0x0, 0x6f, {0x6d, "602245d6c314016677e9abfc569ac9a2f6faa38e7dfd9a88d01c87ae24656b3f1c1dab4b0caad475722736041a3154e6722c26e8fcdca66d562b6e66fdf394326981e46ce266f9fa17e41e4efbe2cb721d3805981858d0b95d6d2444aa29fddc3764d45a0389d1b8e177107d66"}}, &(0x7f0000004500)={0x20, 0x1, 0x1, 0x3f}, &(0x7f0000004540)={0x20, 0x0, 0x1, 0xfc}}) r4 = syz_usb_connect(0x3, 0x3c, &(0x7f00000045c0)={{0x12, 0x1, 0x310, 0xe2, 0x5, 0xc2, 0x10, 0x6e1, 0x709, 0x204, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a, 0x1, 0x5, 0x2, 0x20, 0x6c, [{{0x9, 0x4, 0x4b, 0x3, 0x0, 0x4e, 0x1d, 0x42, 0x5, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "01"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x6, 0x8f}}]}}]}}]}}, &(0x7f0000004880)={0xa, &(0x7f0000004600)={0xa, 0x6, 0x250, 0x1f, 0x45, 0x5, 0x20, 0x2}, 0x4b, &(0x7f0000004640)={0x5, 0xf, 0x4b, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x200, 0xf00, 0x80}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x1, 0x1f}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "9a9d99032a08327ad9be262669372883"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "7c443ca4598c00666a9b47249460ff36"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x6, 0x3, 0xff7f, 0x3f}]}, 0x5, [{0x4, &(0x7f00000046c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000004700)=@lang_id={0x4, 0x3, 0x1c09}}, {0x8c, &(0x7f0000004740)=@string={0x8c, 0x3, "aa6a244dc1b7eedca96d597654c22c90cccc2d14633580b5dea929fabb53046ff38ef1e59dc9c539f9c09a6e0e4737bf8cdbf1a926790d28d86585f5a61ff746d7dc528823d3510f6f5e7994eae60587ca7a6ddb7d5379cfc29ac9e93719f564f57a48271d0696b8bc1766f2197477d18c0d8c346f961dd707306fdd52401fbc2e6c0328692a911a995e"}}, {0x4, &(0x7f0000004800)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000004840)=@lang_id={0x4, 0x3, 0x4001}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000004ac0)={0x14, &(0x7f0000004900)={0x0, 0x24, 0xa2, {0xa2, 0x22, "f8b66f17ac7ed4c6eb047bd1d7297e9cae9b7d0bfc8d46c7be3b4b7fc231deb1e2b6ee2ace3a94e25ff1a9c3b55279cc972e66207912c20ded2588c70adbd4b6dac7c90365401f7209bd06daf4dd6917a4839404fc76b217d75b47a7b373d5733f07d848926be1ebb9e1d12dd0574bfd48ad433e91caf4d37e493c8e410bbee2e53362e3b9e567d55239d105e304beb6d09346cbab014ac5a540620792c29836"}}, &(0x7f00000049c0)={0x0, 0x3, 0xd4, @string={0xd4, 0x3, "c77c2ac5948b569aaa5495420f6880cdf2b37494c4297fb26e2cc8530837f30155ead02c05382b9e849e6c9b52eb541674596cf5497ccf4fa22817de5fb40db92ff53f994325d7922ca480b664184e8e0dbcb65a7ddb6709987b16b00e1a2d3b648c41b0098947875d3484f9bb366c56dc380be7b46414816243b1c425faa2606c9bb59f541916583eb720bb945df7e3b127f13d874da95e52ec7cf6a060e1fa3839e976244d0b66b86ac8c7b2b8487faa7cc3cb96be6c448f248eab0483cbb0fa92f868b38ffb88cacebb46e228ee77088b"}}}, &(0x7f0000004d00)={0x44, &(0x7f0000004b00)={0x0, 0x16, 0x25, "cf4ad1a62f206b1b8651782f807a32a50f96bdbc5948c1cc0800ae2a66b641c19cf76787d4"}, &(0x7f0000004b40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000004b80)={0x0, 0x8, 0x1, 0x4a}, &(0x7f0000004bc0)={0x20, 0x81, 0x2, "0adf"}, &(0x7f0000004c00)={0x20, 0x82, 0x3, 'ao$'}, &(0x7f0000004c40)={0x20, 0x83, 0x1, "92"}, &(0x7f0000004c80)={0x20, 0x84, 0x2, "d3b7"}, &(0x7f0000004cc0)={0x20, 0x85, 0x3, "edd5bc"}}) 15:46:29 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) pwrite64(r0, &(0x7f0000000000)="779fa06958cf65287b1f42f38a63546847daf4f9ede27a8b61f0ba35e0f9ab76b7d77b50b7acd8db530633345548b967aa540906179abd7096742aff3615c0fc50780ee3c60a943c1f834363468b29b95f429e7b60f016be1815cf13987820199ff05f304813cdfe4dc9908ef4aa8d284e41b3194181d20c4bc910ec7cb86d1b2d7580aa800daa9bb55fd55ed3e762", 0x8f, 0x81) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x170, r1, 0xe9f42b3a11d032dc, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x75}}}}, [@NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x3f, 0x6}, {0x7, 0x6}, {0x4, 0x3}, {0x2, 0x5}, {0xd2, 0x5}, {0x20, 0x4}, {0x0, 0x1}, {0x20}, {0xff, 0x3}, {0x5b, 0x5}, {0x3c, 0x5}, {0x0, 0x4}, {0xff, 0x5}, {0x2, 0x5}, {0x40, 0x1}, {0xf0, 0x7}, {0x6, 0x1}, {0x0, 0x2}], "c82f00b90bcafb47"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0xef, 0x4}, {0x5c, 0x7}, {0x0, 0x6}, {0x80, 0x6}, {0x1, 0x7}, {0x4, 0x7}, {0x8, 0x5}, {0x0, 0x6}, {0x0, 0x5}, {0x77, 0x3}, {0x3, 0x5}, {0x81, 0x2}, {0x3, 0x5}], "35c2f585e13f73f9"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0xff, 0x2}, {0x7, 0x6}, {0x2, 0x1}, {0xe0, 0x9}, {0x3f, 0x2}, {0x3, 0x1}, {0x85, 0x1}, {0x1f, 0x3}, {0x8, 0x7}, {0x1, 0x5}, {0x20}, {0x6, 0x2}, {0x81, 0x3}], "003b466b7f63ac6b"}}, @NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0xff, 0x4}, {0xf7, 0x4}, {0xff, 0x5}, {0x0, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x4, 0x1}, {0x2, 0x4}, {0x8, 0x7}, {0x1, 0x1}, {0x6, 0x3}, {0x55, 0x7}, {0x6}, {0x81, 0x1}, {0xe1, 0x5}, {0x0, 0x7}, {0x81, 0x4}, {0x9, 0x3}, {0x7, 0x5}], "86631683e1fe001a"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x4, 0x3}, {0x2, 0x3}, {0x6, 0x4}, {0xff}, {0x6, 0x1}, {0x9c, 0x7}, {0x14, 0x7}, {0x7, 0x6}, {0xa0, 0x1}, {}, {0x7, 0x6}, {0x5}, {0x80, 0x6}, {0xbf, 0x5}, {0x3, 0x3}, {0x20}, {0x5, 0x4}, {0x85, 0x3}], "98b3b990eda12abc"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x20, 0x5}, {0x5, 0x5}, {0x0, 0x1}, {0xff, 0x6}, {0x81, 0x2}, {0x3, 0x6}, {0x3d}, {0x9, 0x6}, {0x3, 0x5}], "aa35a586816703f3"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x5, 0x3}, {0x2, 0x6}, {0x4, 0x1}, {0xff, 0x1}], "feb514766dbe1d0b"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x80, 0x5}, {0x7, 0x5}, {0xa8}, {0x3, 0x7}, {0x8, 0x1}, {0x4, 0x6}], "2cfcb3f590952d44"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x9}, {0xef, 0x3}, {0x2}, {0x40, 0x4}, {0x4, 0x7}, {0x7f, 0x4}, {}, {0x3, 0x3}, {0x3f, 0x5}], "d4afafd8f74ab279"}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4041}, 0x20008001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x9}, @NL80211_ATTR_IE={0x28, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x1f, 0x80, @device_b, 0x10001, "", 0x1f, 0x9, @device_a, 0x8}}, @challenge={0x10, 0x1, 0xba}]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x26}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3f}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x35}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4800) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0xfff8, 0x7}]}) r3 = accept(0xffffffffffffffff, &(0x7f0000000680)=@phonet, &(0x7f0000000700)=0x80) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, 0x0, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa2b}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x34}}, 0x4800) r4 = fork() ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000980)=r4) r5 = socket(0x5, 0x3, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000009c0), r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/module/snd', 0x4a00, 0x6) syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r6) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000a80)={{0x0, 0x5, 0x401, 0x6dc, 0x4, 0x7, 0x2e31, 0x5, 0x40, 0x80000001, 0x400, 0xa3, 0x1ff, 0x2, 0x2}, 0x8, [0x0]}) r7 = signalfd(r6, &(0x7f0000000b00)={[0x2]}, 0x8) syz_open_pts(r7, 0x130400) 15:46:29 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001280)={{}, {0x1000}, 0x4, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="e00bb986010ba526d829f03b293b22083959d7f7fbb1ea673597eaf55e189666bb5074952187c6b56cc7e122f9d5a9e1ae81fa5fa8724372178b6aaa30255f80bddc0701b940a2672e429da617ade25de633a762331798a754", 0x59, 0x0, &(0x7f0000000100)={0x2, 0x135, {0x1, 0xc, 0xbf, "759c62da24dfb831464431b0997c9625d058c395590e1e65fd4f0127f95cf257df4261df48dc21bc57303cd939c52e4821f357161e49873e5bd910f34cb015e8bb5f274bb958a554b2c4b96d4c6b57c0397d935e55355eee2f6ef1f92c2977eb5d8eb8b2b746e543d6be110d0e67a5a397404eceaa9a87141b455c32b2b149b9cca9774ec5db6e179e3929d85c75e683d7c16148cbcf0b72cbfe52d01ce21a62ca7e05c2831f16ff0e16c9ac75efce1e5753a31f72882ee40416347f2d69c4", 0x69, "f4a18f9b0d6c6029d55dc17442afc387f148f05a04da32615578e80e368b564632a18d5fa86c5500bdccb1c1f8dd98c81212cb2816ba091ae45abcc41efa52d20cccc42a8a0950d5fe73792c26b7f9dccb310444ce43123142d39604dfdcce5321a5f8e00ef58050f6"}, 0x1000, "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"}, 0x1141}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001300)={0x0}, &(0x7f0000001340)=0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001380), 0x40000, 0x0) kcmp(0xffffffffffffffff, r2, 0x3, r0, r3) r4 = signalfd4(r3, &(0x7f00000013c0)={[0x5]}, 0x8, 0x0) getsockname(r4, &(0x7f0000001400)=@nfc, &(0x7f0000001480)=0x80) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001680)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/163, 0xa3, 0x1, &(0x7f0000001580)=""/196, 0xc4}, &(0x7f00000016c0)=0x40) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x810) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'team_slave_1\x00'}) bind$inet6(r4, &(0x7f0000001840)={0xa, 0x4e22, 0xffff, @empty, 0x7fff}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000001880)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) shutdown(r5, 0x1) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000018c0)={'veth0_macvtap\x00'}) io_cancel(0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x3, 0x7, r5, &(0x7f0000001900), 0x0, 0x0, 0x0, 0x2, r4}, &(0x7f0000001980)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000004bc0)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000004c00)={r6, 0x1, 0x6, @random="d17643e46a59"}, 0x10) r7 = open(&(0x7f0000004c40)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000004d40)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004d00)={&(0x7f0000004cc0)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1f}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2000000) [ 65.219862] audit: type=1400 audit(1664639189.391:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:46:29 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x5, 0x1ff, 0x7, 0x1f, 0x5]}, &(0x7f00000000c0)=0x54) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) finit_module(r1, &(0x7f0000000100)='\x00', 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) recvmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000300)=""/139, 0x8b}, {&(0x7f00000003c0)=""/76, 0x4c}], 0x5, &(0x7f00000004c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x40022000) setsockopt$inet6_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000640)="d97927cfe9d1", 0x6) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000ac0)={0x0, 0x1, 0xf, 0x18, 0x1de, &(0x7f00000006c0)="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"}) r14 = signalfd4(r11, &(0x7f0000000b00)={[0x3]}, 0x8, 0xc00) ioctl$TIOCL_SETSEL(r14, 0x541c, &(0x7f0000000b40)={0x2, {0x2, 0x0, 0x8000, 0xd1b, 0x0, 0x2}}) setsockopt$inet6_tcp_buf(r12, 0x6, 0x1c, 0xfffffffffffffffd, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000000b80)=""/183, &(0x7f0000000c40)=0xb7) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000c80)=@lsk={0x2, 0x2, "2f71730be0"}) connect$inet6(r6, &(0x7f0000000cc0)={0xa, 0x4e23, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) syz_open_procfs(r9, &(0x7f0000000d00)='net/sockstat6\x00') sendmmsg$inet6(r6, &(0x7f0000000d40), 0x0, 0x4004001) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000d80)={@initdev}, &(0x7f0000000dc0)=0x14) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, &(0x7f0000000e00)) setsockopt$inet6_tcp_TCP_REPAIR(r13, 0x6, 0x13, &(0x7f0000000e40)=0xffffffffffffffff, 0x4) 15:46:29 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x3}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x34}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x419, 0x16}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c0}, 0x4000004) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x216, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9, 0xffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f00000004c0)={0x3c0, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4080}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "3de2201453b179c11195db87f74fea47f22b0f62df75"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbfe}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "a772c71c26a87380d85fbc8329d96e93c0d796bc372524"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "a8b69dcbb36805358b22f809fb87e998145706ee870a6d4ff8c103446951"}}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa5}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e47}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2828}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10000, @mcast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffffe, @mcast2, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "126b1fb2e62609e954303075551f94dbece49bd387e2a31f3e9b63"}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x99}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff8000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x10000800}, 0x24004001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}}, 0x810) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x24}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r6) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x190, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4b}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x28}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcd}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x190}, 0x1, 0x0, 0x0, 0x8d0}, 0x8081) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000fc0)={&(0x7f0000000e80), 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x60, r2, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x34a8, 0x42}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x1d, 0x24, [{0x1b}, {0x1b}, {0x6c, 0x1}, {0x9}, {0x1a, 0x1}, {0x2, 0x1}, {0x12, 0x1}, {0x60}, {0x60}, {0x9}, {0x16}, {0x1b}, {0x1, 0x1}, {0x4}, {0xc, 0x1}, {0x24, 0x1}, {0x18}, {0x60}, {0x36, 0x1}, {0x12}, {0x3}, {0x30, 0x1}, {0xb, 0x1}, {0x12}, {0x5}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xbc, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9d3d}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20004004}, 0x4004041) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0xa4, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6bf952da7158671115de5e00b7c2d82c9143cb1cf44a03a3"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3b29cb78e53a47c76b5a30373c5c9f26a8ef98214ebaae8b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2afb678435fb6325abe6be93e4afd7c018306c780f7dce98"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x44) [ 66.568598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.570124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.580543] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.581895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.588962] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.589974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.600951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.603051] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.604450] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.611858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.615390] Bluetooth: hci0: HCI_REQ-0x0c1a [ 66.622816] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.630732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.632138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.633882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.637338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.638442] Bluetooth: hci1: HCI_REQ-0x0c1a [ 66.639012] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.640421] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.642691] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.644341] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.645847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.650563] Bluetooth: hci3: HCI_REQ-0x0c1a [ 66.654713] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.656579] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.658724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.667471] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.668530] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.672616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.674472] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.675946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.680659] Bluetooth: hci4: HCI_REQ-0x0c1a [ 66.682559] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.683556] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.703849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.705021] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.714617] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.716060] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 66.717585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.718940] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.720290] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 66.721625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 66.733449] Bluetooth: hci5: HCI_REQ-0x0c1a [ 66.733799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 66.735564] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 66.743697] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 66.744711] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 66.750925] Bluetooth: hci2: HCI_REQ-0x0c1a [ 66.781583] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 66.782629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 66.799134] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 66.800591] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 66.805984] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.807144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 66.819407] Bluetooth: hci6: HCI_REQ-0x0c1a [ 66.820562] Bluetooth: hci7: HCI_REQ-0x0c1a [ 68.652640] Bluetooth: hci1: command 0x0409 tx timeout [ 68.653692] Bluetooth: hci0: command 0x0409 tx timeout [ 68.716367] Bluetooth: hci4: command 0x0409 tx timeout [ 68.716469] Bluetooth: hci3: command 0x0409 tx timeout [ 68.780702] Bluetooth: hci2: command 0x0409 tx timeout [ 68.781853] Bluetooth: hci5: command 0x0409 tx timeout [ 68.844361] Bluetooth: hci7: command 0x0409 tx timeout [ 68.845400] Bluetooth: hci6: command 0x0409 tx timeout [ 70.700365] Bluetooth: hci0: command 0x041b tx timeout [ 70.701146] Bluetooth: hci1: command 0x041b tx timeout [ 70.764370] Bluetooth: hci4: command 0x041b tx timeout [ 70.765130] Bluetooth: hci3: command 0x041b tx timeout [ 70.828352] Bluetooth: hci5: command 0x041b tx timeout [ 70.829118] Bluetooth: hci2: command 0x041b tx timeout [ 70.892343] Bluetooth: hci6: command 0x041b tx timeout [ 70.893107] Bluetooth: hci7: command 0x041b tx timeout [ 72.748323] Bluetooth: hci1: command 0x040f tx timeout [ 72.749142] Bluetooth: hci0: command 0x040f tx timeout [ 72.812390] Bluetooth: hci3: command 0x040f tx timeout [ 72.813118] Bluetooth: hci4: command 0x040f tx timeout [ 72.876381] Bluetooth: hci2: command 0x040f tx timeout [ 72.877051] Bluetooth: hci5: command 0x040f tx timeout [ 72.940318] Bluetooth: hci7: command 0x040f tx timeout [ 72.940956] Bluetooth: hci6: command 0x040f tx timeout [ 74.796296] Bluetooth: hci0: command 0x0419 tx timeout [ 74.796747] Bluetooth: hci1: command 0x0419 tx timeout [ 74.861295] Bluetooth: hci4: command 0x0419 tx timeout [ 74.861724] Bluetooth: hci3: command 0x0419 tx timeout [ 74.925286] Bluetooth: hci5: command 0x0419 tx timeout [ 74.925691] Bluetooth: hci2: command 0x0419 tx timeout [ 74.989278] Bluetooth: hci6: command 0x0419 tx timeout [ 74.989692] Bluetooth: hci7: command 0x0419 tx timeout [ 119.369389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.370401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.385033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.386004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.394569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.395414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.396450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.397275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.408875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.409873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.769023] audit: type=1400 audit(1664639243.940:7): avc: denied { open } for pid=3857 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 15:47:23 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)=']{\x00', 0x0, r0) setxattr$incfs_size(&(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=0x9, 0x8, 0x1) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xa015000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) io_uring_setup(0x474c, &(0x7f0000000240)) write$binfmt_aout(r2, &(0x7f0000001180)=ANY=[], 0x220) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') pread64(r3, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000000)={0x0, 0x3, 0x1}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x7}, 0x15182, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="05ff232ef592436bf2d97aa1", 0xe}, {&(0x7f0000000100)="9f", 0x1}, {&(0x7f00000002c0)='^', 0x1}], 0x3, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfffffdef) [ 119.872846] loop2: detected capacity change from 0 to 40 15:47:24 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000002240), &(0x7f0000002280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003740)={[{@uid={'uid', 0x3d, 0xee00}}, {@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@huge_never}], [{@smackfshat={'smackfshat', 0x3d, '-'}}]}) execveat(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)=[&(0x7f0000000040)=':]].++\x00', &(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='smackfshat'], &(0x7f0000000200)=[&(0x7f0000000140)='mpol', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='-'], 0x1000) [ 119.959156] audit: type=1400 audit(1664639244.130:8): avc: denied { kernel } for pid=3864 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 119.978109] ------------[ cut here ]------------ [ 119.978130] [ 119.978133] ====================================================== [ 119.978137] WARNING: possible circular locking dependency detected [ 119.978141] 6.0.0-rc7-next-20220930 #1 Not tainted [ 119.978147] ------------------------------------------------------ [ 119.978150] syz-executor.2/3868 is trying to acquire lock: [ 119.978156] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 119.978196] [ 119.978196] but task is already holding lock: [ 119.978198] ffff888019fd2820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.978228] [ 119.978228] which lock already depends on the new lock. [ 119.978228] [ 119.978231] [ 119.978231] the existing dependency chain (in reverse order) is: [ 119.978234] [ 119.978234] -> #3 (&ctx->lock){....}-{2:2}: [ 119.978247] _raw_spin_lock+0x2a/0x40 [ 119.978259] __perf_event_task_sched_out+0x53b/0x18d0 [ 119.978270] __schedule+0xedd/0x2470 [ 119.978284] schedule+0xda/0x1b0 [ 119.978297] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.978309] syscall_exit_to_user_mode+0x19/0x40 [ 119.978322] do_syscall_64+0x48/0x90 [ 119.978340] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.978352] [ 119.978352] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 119.978366] _raw_spin_lock_nested+0x30/0x40 [ 119.978376] raw_spin_rq_lock_nested+0x1e/0x30 [ 119.978389] task_fork_fair+0x63/0x4d0 [ 119.978406] sched_cgroup_fork+0x3d0/0x540 [ 119.978420] copy_process+0x4183/0x6e20 [ 119.978431] kernel_clone+0xe7/0x890 [ 119.978440] user_mode_thread+0xad/0xf0 [ 119.978450] rest_init+0x24/0x250 [ 119.978462] arch_call_rest_init+0xf/0x14 [ 119.978480] start_kernel+0x4c6/0x4eb [ 119.978495] secondary_startup_64_no_verify+0xe0/0xeb [ 119.978509] [ 119.978509] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 119.978522] _raw_spin_lock_irqsave+0x39/0x60 [ 119.978533] try_to_wake_up+0xab/0x1930 [ 119.978546] up+0x75/0xb0 [ 119.978559] __up_console_sem+0x6e/0x80 [ 119.978575] console_unlock+0x46a/0x590 [ 119.978591] do_con_write+0xc05/0x1d50 [ 119.978602] con_write+0x21/0x40 [ 119.978611] n_tty_write+0x4d4/0xfe0 [ 119.978623] file_tty_write.constprop.0+0x455/0x8a0 [ 119.978635] vfs_write+0x9c3/0xd90 [ 119.978651] ksys_write+0x127/0x250 [ 119.978666] do_syscall_64+0x3b/0x90 [ 119.978683] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.978695] [ 119.978695] -> #0 ((console_sem).lock){....}-{2:2}: [ 119.978709] __lock_acquire+0x2a02/0x5e70 [ 119.978726] lock_acquire+0x1a2/0x530 [ 119.978741] _raw_spin_lock_irqsave+0x39/0x60 [ 119.978752] down_trylock+0xe/0x70 [ 119.978767] __down_trylock_console_sem+0x3b/0xd0 [ 119.978782] vprintk_emit+0x16b/0x560 [ 119.978798] vprintk+0x84/0xa0 [ 119.978814] _printk+0xba/0xf1 [ 119.978825] report_bug.cold+0x72/0xab [ 119.978841] handle_bug+0x3c/0x70 [ 119.978857] exc_invalid_op+0x14/0x50 [ 119.978874] asm_exc_invalid_op+0x16/0x20 [ 119.978886] group_sched_out.part.0+0x2c7/0x460 [ 119.978904] ctx_sched_out+0x8f1/0xc10 [ 119.978920] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.978931] __schedule+0xedd/0x2470 [ 119.978945] schedule+0xda/0x1b0 [ 119.978958] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.978968] syscall_exit_to_user_mode+0x19/0x40 [ 119.978980] do_syscall_64+0x48/0x90 [ 119.978997] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.979009] [ 119.979009] other info that might help us debug this: [ 119.979009] [ 119.979012] Chain exists of: [ 119.979012] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 119.979012] [ 119.979026] Possible unsafe locking scenario: [ 119.979026] [ 119.979029] CPU0 CPU1 [ 119.979031] ---- ---- [ 119.979034] lock(&ctx->lock); [ 119.979040] lock(&rq->__lock); [ 119.979046] lock(&ctx->lock); [ 119.979052] lock((console_sem).lock); [ 119.979058] [ 119.979058] *** DEADLOCK *** [ 119.979058] [ 119.979060] 2 locks held by syz-executor.2/3868: [ 119.979066] #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 119.979095] #1: ffff888019fd2820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 119.979122] [ 119.979122] stack backtrace: [ 119.979124] CPU: 1 PID: 3868 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220930 #1 [ 119.979137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 119.979145] Call Trace: [ 119.979148] [ 119.979152] dump_stack_lvl+0x8b/0xb3 [ 119.979170] check_noncircular+0x263/0x2e0 [ 119.979186] ? format_decode+0x26c/0xb50 [ 119.979203] ? print_circular_bug+0x450/0x450 [ 119.979220] ? simple_strtoul+0x30/0x30 [ 119.979235] ? format_decode+0x26c/0xb50 [ 119.979255] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 119.979273] __lock_acquire+0x2a02/0x5e70 [ 119.979294] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 119.979317] lock_acquire+0x1a2/0x530 [ 119.979333] ? down_trylock+0xe/0x70 [ 119.979350] ? lock_release+0x750/0x750 [ 119.979370] ? vprintk+0x84/0xa0 [ 119.979388] _raw_spin_lock_irqsave+0x39/0x60 [ 119.979399] ? down_trylock+0xe/0x70 [ 119.979415] down_trylock+0xe/0x70 [ 119.979430] ? vprintk+0x84/0xa0 [ 119.979447] __down_trylock_console_sem+0x3b/0xd0 [ 119.979464] vprintk_emit+0x16b/0x560 [ 119.979483] vprintk+0x84/0xa0 [ 119.979500] _printk+0xba/0xf1 [ 119.979511] ? record_print_text.cold+0x16/0x16 [ 119.979527] ? report_bug.cold+0x66/0xab [ 119.979545] ? group_sched_out.part.0+0x2c7/0x460 [ 119.979563] report_bug.cold+0x72/0xab [ 119.979581] handle_bug+0x3c/0x70 [ 119.979598] exc_invalid_op+0x14/0x50 [ 119.979616] asm_exc_invalid_op+0x16/0x20 [ 119.979629] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 119.979649] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 119.979661] RSP: 0018:ffff88804014fc48 EFLAGS: 00010006 [ 119.979670] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 119.979677] RDX: ffff88801b938000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 119.979685] RBP: ffff8880401d8000 R08: 0000000000000005 R09: 0000000000000001 [ 119.979692] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff888019fd2800 [ 119.979700] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 119.979711] ? group_sched_out.part.0+0x2c7/0x460 [ 119.979730] ? group_sched_out.part.0+0x2c7/0x460 [ 119.979750] ctx_sched_out+0x8f1/0xc10 [ 119.979769] __perf_event_task_sched_out+0x6d0/0x18d0 [ 119.979783] ? lock_is_held_type+0xd7/0x130 [ 119.979797] ? __perf_cgroup_move+0x160/0x160 [ 119.979808] ? set_next_entity+0x304/0x550 [ 119.979825] ? update_curr+0x267/0x740 [ 119.979843] ? lock_is_held_type+0xd7/0x130 [ 119.979857] __schedule+0xedd/0x2470 [ 119.979874] ? io_schedule_timeout+0x150/0x150 [ 119.979891] ? rcu_read_lock_sched_held+0x3e/0x80 [ 119.979911] schedule+0xda/0x1b0 [ 119.979926] exit_to_user_mode_prepare+0x114/0x1a0 [ 119.979938] syscall_exit_to_user_mode+0x19/0x40 [ 119.979952] do_syscall_64+0x48/0x90 [ 119.979969] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 119.979982] RIP: 0033:0x7f5338367b19 [ 119.979990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 119.980001] RSP: 002b:00007f53358dd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 119.980012] RAX: 0000000000000001 RBX: 00007f533847af68 RCX: 00007f5338367b19 [ 119.980019] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f533847af6c [ 119.980026] RBP: 00007f533847af60 R08: 000000000000000e R09: 0000000000000000 [ 119.980033] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f533847af6c [ 119.980040] R13: 00007ffca7d5ff8f R14: 00007f53358dd300 R15: 0000000000022000 [ 119.980053] [ 120.035746] WARNING: CPU: 1 PID: 3868 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 120.036423] Modules linked in: [ 120.036676] CPU: 1 PID: 3868 Comm: syz-executor.2 Not tainted 6.0.0-rc7-next-20220930 #1 [ 120.037272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 120.038094] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 120.038503] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 120.039830] RSP: 0018:ffff88804014fc48 EFLAGS: 00010006 [ 120.040217] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.040745] RDX: ffff88801b938000 RSI: ffffffff81565dc7 RDI: 0000000000000005 [ 120.041270] RBP: ffff8880401d8000 R08: 0000000000000005 R09: 0000000000000001 [ 120.041799] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff888019fd2800 [ 120.042315] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002 [ 120.042834] FS: 00007f53358dd700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 120.043415] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.043843] CR2: 00007fb2a15c74a1 CR3: 0000000019d62000 CR4: 0000000000350ee0 [ 120.044359] Call Trace: [ 120.044555] [ 120.044737] ctx_sched_out+0x8f1/0xc10 [ 120.045035] __perf_event_task_sched_out+0x6d0/0x18d0 [ 120.045417] ? lock_is_held_type+0xd7/0x130 [ 120.045745] ? __perf_cgroup_move+0x160/0x160 [ 120.046075] ? set_next_entity+0x304/0x550 [ 120.046391] ? update_curr+0x267/0x740 [ 120.046690] ? lock_is_held_type+0xd7/0x130 [ 120.047018] __schedule+0xedd/0x2470 [ 120.047299] ? io_schedule_timeout+0x150/0x150 [ 120.047645] ? rcu_read_lock_sched_held+0x3e/0x80 [ 120.048007] schedule+0xda/0x1b0 [ 120.048265] exit_to_user_mode_prepare+0x114/0x1a0 [ 120.048626] syscall_exit_to_user_mode+0x19/0x40 [ 120.049000] do_syscall_64+0x48/0x90 [ 120.049285] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.049662] RIP: 0033:0x7f5338367b19 [ 120.049935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 120.051237] RSP: 002b:00007f53358dd218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 120.051799] RAX: 0000000000000001 RBX: 00007f533847af68 RCX: 00007f5338367b19 [ 120.052316] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f533847af6c [ 120.052836] RBP: 00007f533847af60 R08: 000000000000000e R09: 0000000000000000 [ 120.053358] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f533847af6c [ 120.053872] R13: 00007ffca7d5ff8f R14: 00007f53358dd300 R15: 0000000000022000 [ 120.054390] [ 120.054567] irq event stamp: 5936 [ 120.054820] hardirqs last enabled at (5935): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 120.055503] hardirqs last disabled at (5936): [] __schedule+0x1225/0x2470 [ 120.056109] softirqs last enabled at (5694): [] __irq_exit_rcu+0x11b/0x180 [ 120.056754] softirqs last disabled at (5659): [] __irq_exit_rcu+0x11b/0x180 [ 120.057380] ---[ end trace 0000000000000000 ]--- [ 120.071469] tmpfs: Unknown parameter 'smackfshat' [ 120.083735] tmpfs: Unknown parameter 'smackfshat' 15:47:24 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000002240), &(0x7f0000002280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003740)={[{@uid={'uid', 0x3d, 0xee00}}, {@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@huge_never}], [{@smackfshat={'smackfshat', 0x3d, '-'}}]}) execveat(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)=[&(0x7f0000000040)=':]].++\x00', &(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='smackfshat'], &(0x7f0000000200)=[&(0x7f0000000140)='mpol', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='-'], 0x1000) [ 120.144049] syz-executor.2: attempt to access beyond end of device [ 120.144049] loop2: rw=2049, sector=40, nr_sectors = 4 limit=40 [ 120.145299] Buffer I/O error on dev loop2, logical block 10, lost async page write [ 120.147984] tmpfs: Unknown parameter 'smackfshat' 15:47:24 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000002240), &(0x7f0000002280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003740)={[{@uid={'uid', 0x3d, 0xee00}}, {@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@huge_never}], [{@smackfshat={'smackfshat', 0x3d, '-'}}]}) execveat(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100)=[&(0x7f0000000040)=':]].++\x00', &(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='smackfshat'], &(0x7f0000000200)=[&(0x7f0000000140)='mpol', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='-'], 0x1000) [ 120.230345] tmpfs: Unknown parameter 'smackfshat' VM DIAGNOSIS: 15:47:24 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888017c2d400 RCX=ffffffff812a1cb8 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff888017c2d548 RBP=ffff888017c2d540 RSP=ffff8880185d7c58 R8 =0000000000000000 R9 =ffffffff85b06ed7 R10=0000000000000000 R11=0000000000000001 R12=ffff8880185d7d88 R13=ffff88800de2de60 R14=dffffc0000000000 R15=ffff8880185d7d88 RIP=ffffffff814ce474 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f854fa658c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a387289fe8 CR3=000000000ec7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff YMM02=0000000000000000 0000000000000000 ffffff0f0e0d0c0b 0a09080706050403 YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973 YMM04=0000000000000000 0000000000000000 000000323d524f4e 494d00373d524f4a YMM05=0000000000000000 0000000000000000 3d5145534b534944 006b7369643d4550 YMM06=0000000000000000 0000000000000000 3d454d414e564544 00303d444955555f YMM07=0000000000000000 0000000000000000 5953425553003270 6f6f6c2f6b636f6c YMM08=0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000020002000 0000000020000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88804014f690 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000065 R11=0000000000000001 R12=0000000000000065 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f53358dd700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb2a15c74a1 CR3=0000000019d62000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000