Warning: Permanently added '[localhost]:2785' (ECDSA) to the list of known hosts. 2022/10/02 03:26:19 fuzzer started 2022/10/02 03:26:20 dialing manager at localhost:35095 syzkaller login: [ 44.638098] cgroup: Unknown subsys name 'net' [ 44.830255] cgroup: Unknown subsys name 'rlimit' 2022/10/02 03:26:35 syscalls: 210 2022/10/02 03:26:35 code coverage: enabled 2022/10/02 03:26:35 comparison tracing: enabled 2022/10/02 03:26:35 extra coverage: enabled 2022/10/02 03:26:35 setuid sandbox: enabled 2022/10/02 03:26:35 namespace sandbox: enabled 2022/10/02 03:26:35 Android sandbox: enabled 2022/10/02 03:26:35 fault injection: enabled 2022/10/02 03:26:35 leak checking: enabled 2022/10/02 03:26:35 net packet injection: enabled 2022/10/02 03:26:35 net device setup: enabled 2022/10/02 03:26:35 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 03:26:35 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 03:26:35 USB emulation: enabled 2022/10/02 03:26:35 hci packet injection: enabled 2022/10/02 03:26:35 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 03:26:35 802.15.4 emulation: enabled 2022/10/02 03:26:35 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 03:26:36 starting 8 fuzzer processes 03:26:36 executing program 0: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x2, 0x0, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x7b4c8df1, 0x40040) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x1, 0x2, 0x5}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r2, &(0x7f0000000140)="e5d9963b2ffeb902331a9f28aac6200f47fb0b55f435501b89bd59c0ff", 0x1d) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$snapshot(r3, &(0x7f00000001c0)=""/215, 0xd7) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1001, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x77) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r6 = fsmount(r5, 0x0, 0x83) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x6, 0x0, 0x9, 0x80, 0x0, 0x20, 0x242, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000400), 0x7}, 0x24, 0x6, 0x8, 0x9, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0x10, r6, 0x2) bind$bt_sco(r6, &(0x7f00000004c0), 0x8) r7 = syz_open_dev$hiddev(&(0x7f0000000500), 0x5fc10fb5, 0xf2000) ioctl$HIDIOCSUSAGES(r7, 0x501c4814, &(0x7f0000000540)={{0x3, 0x200, 0x7f, 0x9, 0x1, 0x101}, 0x2fb, [0x7, 0x8000, 0x0, 0x5, 0x8, 0x7, 0x401, 0xbeb8, 0x4bfb380, 0x7fffffff, 0x1000, 0x2, 0x3, 0x4, 0x2, 0x6, 0x9, 0x3fe, 0x8, 0x81, 0x401, 0x6, 0x3, 0x81, 0xff, 0x4, 0x3, 0x8000, 0x0, 0x3, 0x8001, 0x3f, 0x3, 0x9af, 0x3, 0x80000001, 0x891, 0x7fffffff, 0x8, 0x81, 0x1000, 0x7, 0x0, 0x5, 0x83, 0x433, 0xffff, 0x1, 0xfe, 0x1000, 0x101, 0x0, 0x4, 0x1, 0xffff, 0x32d, 0x9, 0x20, 0xffffffff, 0x7, 0x9473048, 0x3, 0x3cba, 0x1, 0x6, 0xca8c, 0x0, 0x7, 0x5, 0x80, 0x3, 0x1, 0xfd18, 0x9, 0x0, 0x5, 0x8, 0xffff, 0x3, 0x8, 0x5, 0x3, 0x6, 0x4, 0x7, 0x7, 0xfffff001, 0x74af, 0x0, 0x80000001, 0x5, 0x9, 0x400, 0x80000001, 0x1000, 0x8, 0x7, 0xffffffb1, 0x1, 0x5, 0x1, 0x1, 0x9, 0x7fff, 0x5, 0x68e, 0x400, 0x40b, 0x61, 0x7fffffff, 0xfffff65c, 0x7, 0x800, 0x3, 0xccf6, 0x3, 0x10001, 0xc0, 0x7b8, 0x80000001, 0x5, 0x1, 0x2, 0x7fffffff, 0x1, 0x1, 0x0, 0x7fffffff, 0x30, 0xd2, 0x5, 0x9, 0x31e, 0x7, 0x9, 0x0, 0x1, 0x3f, 0x6a619927, 0x3, 0x8, 0x4, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7fffffff, 0x10000, 0x7c4, 0x0, 0x101, 0x8, 0x2, 0x0, 0x3, 0x2, 0x80000000, 0xf4eb, 0x7fffffff, 0x7, 0xfff, 0x8, 0x9f, 0x81, 0x4, 0x5, 0x3, 0xffffffa0, 0x0, 0x7f, 0x7, 0x9, 0x7, 0x3, 0x7, 0x9, 0x5, 0x1, 0x81, 0x0, 0x400000, 0x6, 0x6, 0x3, 0x2457, 0x1, 0x2, 0xc2e, 0x8, 0x2, 0x7fffffff, 0x7, 0x5, 0x0, 0x54, 0x4c, 0xffffffe1, 0x0, 0x81, 0x81, 0xfffffffd, 0xffffffff, 0x1, 0x80, 0xfffff1c8, 0x9, 0x6, 0x242aff92, 0x1, 0x3, 0xffffffff, 0x10001, 0x9, 0x2, 0x80000001, 0xffffffff, 0x1000, 0x9, 0x3ff, 0xb3af, 0x5, 0x10000, 0x8f5b, 0x4, 0x0, 0x500, 0xab61, 0x2, 0xfff, 0x200, 0x5, 0x5, 0x2, 0x7f, 0x64e42e36, 0x3f, 0x5, 0xa9, 0xfffff845, 0x100000, 0x596, 0x5, 0x9, 0x0, 0x10, 0x5, 0x0, 0x2, 0xe858, 0x1, 0x0, 0x7, 0x3, 0x6, 0x5, 0x6f85, 0x7ced, 0x7, 0x5, 0x2, 0x1, 0x8, 0x6, 0x1ff, 0x9095, 0x0, 0xfffffffe, 0x8, 0x3, 0x0, 0x7ff, 0x80, 0x854b, 0xffffffd0, 0x7, 0x3, 0x81b, 0x5, 0x6c, 0x8f, 0xfffffffc, 0x40, 0x2, 0x6, 0x401, 0x5, 0x1, 0x9, 0x1, 0x3f, 0x3, 0x100, 0x2, 0x3ff, 0x7, 0x5, 0x1, 0x8, 0x80, 0x7, 0x3ff, 0x2, 0x9, 0x4e, 0x101, 0x0, 0x1, 0x2, 0x800, 0x10001, 0x2, 0x2, 0x5, 0x3, 0x2bf8, 0x40, 0x3, 0x0, 0x1, 0x6, 0x5, 0x84db, 0x2000, 0x9c, 0x7fff, 0x3, 0x0, 0xe944, 0x6, 0x7, 0x8, 0x9, 0x7ff, 0x2, 0x9, 0x2, 0x2, 0x8, 0x0, 0x1, 0x5, 0x7fff, 0x5, 0x87, 0x602, 0x0, 0x3f, 0x3, 0x800, 0x2, 0x6, 0x3ff, 0x1f, 0xffffffff, 0x3, 0x362d, 0x0, 0x3, 0x81, 0x800, 0x212, 0x6, 0xff, 0x5, 0x8000, 0x0, 0x7, 0x5a7f, 0x5, 0x1, 0x3, 0x0, 0x4, 0x80000001, 0x3f, 0x5, 0x80000001, 0x5, 0xff, 0x2, 0x6, 0xcc, 0x10001, 0x400, 0x4147, 0x4, 0x400, 0xa0c, 0x4, 0xd430, 0x6, 0x6, 0x9, 0xccac, 0x2, 0x9, 0xeca, 0x800, 0x5, 0x9, 0x4, 0x0, 0xcf75, 0x9, 0x9, 0x7, 0x8001, 0x2, 0x1, 0x0, 0x1000, 0xfff, 0x8, 0x1, 0x3, 0x8e5, 0xffffff59, 0x738, 0x8, 0x38000, 0xb4f, 0x55e3, 0x7, 0x2, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x0, 0x3, 0x10, 0x5, 0x3, 0x3, 0x7, 0x2, 0x10000, 0x6, 0x1000, 0x1, 0x8000, 0x5, 0x3, 0x2, 0x9, 0x7, 0x8000000, 0x2, 0x1ff, 0x100, 0xbf0, 0x9, 0x40, 0x849f, 0x2, 0x81, 0x3ff, 0xfffffbff, 0x7fff, 0x7fff, 0xcb, 0x10000, 0x678, 0x100, 0xfffff801, 0x1ff, 0x72, 0x4, 0x7f, 0x4, 0x9a5d, 0x8, 0x100, 0x51af, 0x8, 0x7f, 0x7c, 0x0, 0x9, 0x5, 0x2, 0x45b5, 0x5, 0x5, 0x1, 0x8, 0xffff, 0x7, 0xfffffff7, 0x2c, 0x3ff, 0x2, 0x2, 0x8001, 0x4, 0xfff, 0x7, 0xba, 0x595, 0xffffffff, 0x7f, 0x200, 0x5, 0x0, 0x2, 0x3, 0x5, 0x5, 0x4f17, 0x7, 0x4, 0x1, 0x800, 0x7, 0xffff7fff, 0x7, 0x6, 0x6, 0x7, 0x0, 0x8, 0x101, 0xffffff00, 0xbab5, 0x6, 0x3, 0xa6, 0x8, 0x4, 0x104, 0x2c8500, 0x1, 0x7, 0x8, 0x7fffffff, 0x9, 0x81, 0x0, 0x9, 0x5, 0x5, 0x100, 0x1, 0x99b4, 0x0, 0x4, 0x100, 0x5, 0xd642, 0x52, 0xe2945d, 0x4, 0x20, 0x8, 0x1, 0x80, 0x40, 0x0, 0x399f, 0x9, 0x8, 0x6d, 0xc04, 0x3f, 0x2, 0x3, 0xa8, 0x7, 0x8, 0x8, 0x40, 0xffffffff, 0x5, 0x7fff, 0x81, 0xffffff00, 0x7fff, 0xd18, 0x2, 0x0, 0xe9, 0x7fffffff, 0x0, 0x4, 0x9, 0x401, 0xe00, 0xfffffff7, 0x7, 0x800, 0x9, 0xffffffff, 0x7, 0x4, 0x21e, 0x400, 0xfffffffd, 0xffffffff, 0x40, 0x7, 0x8, 0x6, 0x9, 0x5, 0x8, 0x2, 0x6, 0x6, 0x5, 0xd7b3, 0x20, 0x8, 0x5, 0x0, 0x7fff, 0x5, 0x5, 0x5, 0x8, 0x6, 0x2, 0xfffffff2, 0x4, 0x8, 0x1, 0xffffffff, 0x1, 0x2, 0x3, 0x4, 0x0, 0x3, 0x6, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xfffffbff, 0xffffff7f, 0x1, 0x0, 0x5f, 0x200, 0xcb, 0x6, 0x7, 0x1, 0x4, 0xcbe, 0x0, 0x3, 0xc6e9, 0x2, 0x2, 0x7fff, 0xb02, 0x46, 0x6, 0x7, 0x4, 0x6, 0x800, 0x292, 0x0, 0x800, 0x9, 0x80000000, 0x0, 0x2, 0xfd, 0xb18, 0x370d28c4, 0x9, 0xffffffff, 0x800, 0xb860, 0x3, 0x1, 0x9, 0x5, 0x4, 0x4, 0x7f, 0x4, 0x7f, 0x81, 0x8, 0xd1a9, 0x0, 0x57, 0x4, 0x3, 0x6, 0x8000, 0x0, 0x6, 0x8001, 0x0, 0xffffffff, 0xfffffffd, 0x1, 0x8, 0x3, 0x5, 0xc0000000, 0xfff, 0xac, 0x1f, 0x101, 0x3, 0x3ff, 0x1, 0x7, 0x1000, 0x80000000, 0x8, 0x0, 0x10001, 0x0, 0xd0, 0x6, 0x7, 0x3, 0x1b1e, 0x1, 0x5, 0xfffffffd, 0x0, 0x8, 0x4, 0x7fff, 0xa1a6, 0x81, 0xd407, 0x4, 0x4, 0x1f, 0x1ff, 0x5, 0xa5c, 0x2, 0x7, 0x3, 0x3, 0x4, 0x8, 0xfa, 0xc2a, 0x401, 0x8, 0x20, 0x400, 0x368dd918, 0x80000000, 0x7, 0x6103c46d, 0x2, 0x78, 0x0, 0x8, 0xe7, 0x0, 0x3, 0x80000001, 0x1ff, 0x500, 0x81, 0x7d, 0x0, 0x70000, 0x6, 0x0, 0xd1, 0xffff893f, 0x7, 0x0, 0x2, 0x1, 0xfffffeff, 0x6, 0x82, 0x5, 0x80, 0x9, 0xd6e, 0x70d5, 0x8, 0xfffffff8, 0x2, 0x80000000, 0x2, 0x10001, 0xffffffff, 0x8, 0x8, 0x40, 0xff, 0x2, 0xffffffff, 0x1c, 0x80000000, 0x8000, 0x5, 0x40, 0x10000, 0x401, 0x5, 0x6, 0x200, 0xffffffe0, 0x6, 0x6, 0x1, 0x5aa, 0x2, 0xffffffff, 0x20, 0x20eef9e0, 0x80000000, 0x9, 0x800, 0x800, 0x3, 0x2, 0x2, 0x3, 0x100, 0x3, 0x3, 0x8001, 0xab16a4d3, 0x1fff, 0x4, 0x6, 0x80000001, 0x10000, 0x2, 0x2, 0xb1f166b, 0x3, 0x8, 0x4, 0x4, 0x8, 0x7, 0xffffffff, 0xd1, 0x8, 0x6, 0x800, 0x1, 0xfff, 0xffffffff, 0x0, 0xfffffff7, 0x5, 0x8, 0x4, 0x8, 0x8, 0x7aaa30a8, 0x101, 0x8, 0x7ff, 0x9, 0x8, 0x19f, 0x3, 0xbbb6, 0x1000, 0x7ff, 0x0, 0x3ff, 0x100, 0x1, 0x9, 0x0, 0x0, 0x9, 0x88e8, 0x1, 0x453c, 0x0, 0x1, 0x400, 0x0, 0x2, 0xda, 0x7, 0x3ff, 0xfffffbff, 0x7, 0x7, 0x10000, 0x4, 0x80, 0x7fffffff, 0x9, 0x401, 0x81, 0x1ff, 0x6, 0x8, 0x5, 0x4607, 0x9, 0x7, 0xff, 0x7fffffff, 0x6, 0x400, 0x9, 0x0, 0x800, 0x7, 0x5, 0x80000001, 0x9, 0x5, 0x6, 0x8, 0x2, 0x9721, 0x9, 0x8, 0x0, 0x400, 0x200, 0x4, 0x2, 0x5, 0xffff, 0x9, 0x3f, 0x1, 0x8001, 0x8, 0x7, 0xb47, 0x9, 0x6, 0x9, 0x9, 0x5, 0x3, 0x10001, 0xffffffff, 0x4, 0x3, 0x1, 0x7, 0x200, 0x7, 0x3, 0x4, 0x1, 0x7fffffff, 0x5, 0x7f, 0x4, 0x81, 0x0, 0x200, 0x0, 0x5, 0x800, 0x4, 0x7, 0x6, 0x3, 0x9, 0x5, 0x401, 0x80000000, 0x1ff, 0xfffffffc, 0x5, 0xffffffff, 0xfff, 0x2, 0x9, 0x6, 0x1000, 0x90, 0xb391, 0x3, 0x81, 0x17, 0x0, 0x1, 0x6, 0x5, 0x4, 0xffff, 0x9, 0x3, 0xba, 0x1, 0x10001, 0xffffffff, 0x2, 0x4f43, 0x11, 0x40, 0x1000000, 0x10000, 0x9, 0x8, 0x6, 0xffffa48e, 0x0, 0x7, 0x1000, 0x7fffffff, 0x3, 0x7, 0x3, 0x4, 0x1, 0xe00, 0x3ff]}) r8 = fsmount(r6, 0x1, 0x5) read$snapshot(r8, &(0x7f0000001580)=""/94, 0x5e) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x3) 03:26:36 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x20}, 0x8001}}, 0x18) r1 = memfd_secret(0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x1, 0x0, 0x6}}, 0x14) r2 = memfd_secret(0x0) write$P9_RWALK(r2, &(0x7f0000000140)={0x8b, 0x6f, 0x2, {0xa, [{0x1, 0x1, 0x8}, {0x2, 0x3, 0x6}, {0x2, 0x3, 0x4}, {0x80, 0x2, 0x6}, {0x10, 0x2, 0x5}, {0x0, 0x3, 0x3}, {0x10, 0x0, 0x8}, {0x80, 0x3, 0x3}, {0x80, 0x4, 0x5}, {0x4, 0x2, 0x5}]}}, 0x8b) write$P9_RLOCK(r1, &(0x7f0000000200)={0x8, 0x35, 0x2, 0x3}, 0x8) write$P9_RCLUNK(r0, &(0x7f0000000240)={0x7, 0x79, 0x1}, 0x7) r3 = fsmount(r1, 0x1, 0xe1) write$P9_RSYMLINK(r3, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x80, 0x2, 0x6}}, 0x14) write$P9_RCLUNK(r3, &(0x7f00000002c0)={0x7, 0x79, 0x1}, 0x7) write$P9_RREADDIR(r2, &(0x7f0000000300)={0xc5, 0x29, 0x1, {0x4, [{{0x8, 0x2, 0x6}, 0x400, 0x81, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x1, 0x7, 0x7, './file0'}, {{0x10, 0x2, 0x5}, 0x7, 0x9, 0x7, './file0'}, {{0x4, 0x4, 0x5}, 0x5, 0x7f, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x8, 0x20, 0x7, './file0'}, {{0x0, 0x2, 0x1}, 0x81, 0x80, 0x7, './file0'}]}}, 0xc5) write$P9_RXATTRWALK(r0, &(0x7f0000000400)={0xf, 0x1f, 0x2, 0x1f}, 0xf) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) write$P9_RGETATTR(r0, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0x1220, {0x10, 0x4, 0x2}, 0x0, r4, r5, 0x6fbd, 0x8, 0x5, 0x81, 0xf2, 0x28, 0x9, 0x7, 0x2, 0x3, 0x8000000000000, 0x6, 0x8, 0x3, 0x7}}, 0xa0) r6 = accept$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x14) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000700), &(0x7f0000000740)=0x10) 03:26:36 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x1, 0x81}) r1 = socket(0x29, 0x3, 0x7ff) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = accept(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000180)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x0, 0x9, 0x0, @loopback, @private2, 0x0, 0x10, 0x8, 0xce}}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={0x0, @can, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @can={0x1d, r4}, 0xf3, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)='gre0\x00', 0x8, 0xe777, 0xd}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000400)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000440)={0x4a, 0x6f, 0x1, {0x5, [{0x0, 0x1, 0x8}, {0x40, 0x2, 0x8}, {0x80, 0x4, 0x1}, {0x2, 0x4, 0x1}, {0x0, 0x0, 0x6}]}}, 0x4a) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RCLUNK(r5, &(0x7f00000004c0)={0x7, 0x79, 0x1}, 0x7) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000500)=0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = fsmount(r5, 0x1, 0xd) write$P9_RSETATTR(r6, &(0x7f0000000540)={0x7, 0x1b, 0x1}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000580)) ioctl$HIDIOCGFIELDINFO(r6, 0xc038480a, &(0x7f00000005c0)={0x1, 0x3, 0xbe3, 0x3f, 0x1, 0x101, 0x40, 0x20, 0x3, 0x4, 0xf0000000, 0x80, 0x4, 0x5}) ioctl$HIDIOCGFLAG(r5, 0x8004480e, &(0x7f0000000600)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000640)) [ 60.323221] audit: type=1400 audit(1664681196.623:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:26:36 executing program 3: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x801, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x801, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x2012, {0x10, 0x4}, 0x4, r1, 0xee00, 0x1ff, 0x2, 0x9f61, 0x5, 0xa7, 0x6, 0x3ff, 0x1f, 0x99c0, 0x8, 0xffffffffffff5187, 0x2, 0x0, 0x1, 0x1}}, 0xa0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x11, 0xffffffffffffffff, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x4) write$9p(r2, &(0x7f0000000200)="f9a9a031e9c6d7330a1c7d7631fd7c2cdeb990da580ef35434e15f7fc64a1b034a53dec3e6bfbd08f61edcded7235e6a400caac65e72f4ef53fdd810480ef44ed2882f6bf8548217f6b8a7b8646c9eb201f6308a61f873da6b45ee98f4816c9e81ce35", 0x63) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x38, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x2}, @dead_binder_done, @exit_looper, @enter_looper, @decrefs, @decrefs={0x40046307, 0x2}, @dead_binder_done], 0xac, 0x0, &(0x7f00000002c0)="b799bfcff98c13a7bd71282828b8536f78053eb55baa53c9b4d40e3a578d3d55d2db48f403b7b6c98054e0eb84bad2fcb5edaeeaba37f6ec98b57e1454a8a1198a413fa75cd74b0265b13701a8a8657c6bdf186c84c2a42234aba88120f7fc4db65807b86c684ee445597403c11a3da9df9bf6c0fbd4676c9ce6678933b2866af584a60990392003849471a848bfa5fd04487826809d11bafbde6e825c3e86778ec05640479b3c10ed5d2272"}) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000003c0)=0x7, 0x4) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000400)={0x3, 0x2, 0x8}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x308}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x8000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x29, 0x51, 0x5, 0x7, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x54d, 0x5}}) r5 = memfd_secret(0x0) write$P9_RMKNOD(r5, &(0x7f00000007c0)={0x14, 0x13, 0x2, {0x78, 0x0, 0x5}}, 0x14) 03:26:36 executing program 4: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) r0 = memfd_secret(0x0) write$P9_RSTAT(r0, &(0x7f0000000040)={0x48, 0x7d, 0x1, {0x0, 0x41, 0x9, 0xf40, {0x20, 0x0, 0x8}, 0x81810000, 0x9, 0x1, 0x5, 0x7, '$[@#})&', 0x0, '', 0x5, '\\*,,)', 0x2, '.!'}}, 0x48) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x400) write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000140)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x80, 0x3, 0x3}}, 0x14) io_setup(0x4, &(0x7f00000001c0)) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) write$P9_RVERSION(r0, &(0x7f0000000280)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000002c0)={0x8, 0x40e}) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xef7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000440)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 03:26:36 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLERROR(r0, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '%'}}, 0xa) write$P9_RREAD(r0, &(0x7f0000000040)={0x10a, 0x75, 0x1, {0xff, "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"}}, 0x10a) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x81, 0xf9, 0x1, 0x0, 0x68, 0x240, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100c0, 0xf1, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x30, 0x8, 0x0, 0x0, 0x8, 0x200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1400, 0x6, 0xffffffff, 0x3, 0x5, 0xff, 0x3ff, 0x0, 0x100, 0x0, 0x100000000}, 0x0, 0x7, r1, 0x4) write$P9_RLERROR(r0, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x841) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x39, 0x10601) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/93) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000500)={{0x3, 0x100, 0x1, 0xc11, 0x2, 0x81}, 0xf6, [0x8, 0x401, 0x3f, 0x1, 0x10000, 0x3, 0x1ff, 0x5, 0x101, 0x9, 0x3, 0x3, 0x6, 0x7, 0x0, 0x5, 0x100, 0x7ff, 0x7ff, 0x0, 0x7fff, 0x7, 0x0, 0x8542, 0xa, 0xfffffff9, 0x1, 0x6, 0x82, 0x7, 0x5, 0x5, 0xff, 0x2, 0x80000001, 0x0, 0x10001, 0x0, 0x3ff, 0x2, 0x5, 0x1, 0x5, 0x1, 0x1, 0xeb9f, 0x8, 0x8001, 0x4, 0x6, 0x401, 0x8, 0x1, 0x20, 0xef, 0x0, 0x200, 0x2, 0x3, 0x8, 0xfffffffd, 0x3, 0x7, 0x56, 0x9bd6, 0x7, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x14000000, 0x7fffffff, 0x7, 0x1ff, 0x56, 0x8001, 0x400, 0x4, 0x8000, 0xfff, 0x3, 0x4, 0x3ff, 0x3, 0x1, 0x1f, 0xfff, 0x200, 0x9, 0x7, 0x3c3f, 0xfff, 0x5, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0x7, 0x4, 0x6, 0x101, 0x0, 0x7, 0x7, 0x400, 0xd1, 0x10001, 0x6, 0x1, 0x100, 0x3, 0x7, 0x4, 0x7fff, 0x2, 0x5, 0xf2, 0x113d70bb, 0x3, 0xffffffff, 0x1f, 0x20, 0x6, 0x8, 0x401, 0x6, 0x7f, 0x6, 0x3f, 0x3, 0x401, 0x5, 0x1, 0x80, 0x8, 0x10000, 0x7fff, 0x1, 0x1, 0x10000, 0x9, 0x5a7e9d0f, 0x4, 0x6, 0x8, 0x100, 0x8000, 0xfffffffc, 0x371b, 0x1, 0xd0, 0x1, 0x6, 0x200, 0x1, 0x675, 0xfffff229, 0x9, 0x2, 0x5, 0x3, 0x200, 0x30000, 0x1000, 0x4, 0xfffffeff, 0x5, 0x5, 0x100, 0x7, 0x10001, 0x1, 0x8, 0x8, 0x7fffffff, 0x8, 0x6, 0x7f, 0x5, 0x8, 0x8, 0x7fff, 0x2, 0x82b, 0x8001, 0x5, 0x5, 0x1f, 0x67, 0x20, 0x0, 0x1, 0x7, 0x101, 0x3, 0x0, 0xe69, 0x800, 0x0, 0x8, 0x1ff, 0xa4e1, 0xc92, 0x3, 0xa2e6, 0xfffffbff, 0x2, 0x0, 0x3, 0x3, 0x5, 0x0, 0x6f861b8b, 0x6, 0x80000001, 0x7217e9fb, 0x1, 0x401, 0x80, 0x7a880, 0x5, 0x0, 0x72e, 0x81, 0x40, 0x1000, 0x80000001, 0x4, 0x3, 0x1f, 0x37, 0x100, 0xce9, 0x80, 0x4, 0x80, 0x0, 0x200, 0x3, 0xfff, 0x7, 0x3f, 0x3, 0x80000001, 0x7, 0x3, 0x1ef, 0xfffffffb, 0x1, 0x2e5, 0x1, 0x101, 0x9, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x8, 0xfa7e, 0x401, 0x7, 0x0, 0x8d8, 0xbe6, 0x3, 0xec, 0x1, 0x9e, 0x6, 0x3, 0x1ff, 0xd373, 0x100, 0xe7, 0x0, 0xfffffffc, 0x1, 0x61877ea5, 0x9, 0x80000000, 0x200, 0x1, 0x0, 0x6f9, 0x2, 0x7fff, 0x5, 0x1ff, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x5, 0x4, 0xd040, 0x7fffffff, 0x7, 0x1, 0x2, 0x877a, 0x4, 0x35f, 0x9, 0x2, 0x2, 0x4, 0xffffffff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0xfffffffd, 0xd6c9, 0x5, 0x6, 0x7f, 0x20, 0x4, 0x3, 0xfffffff8, 0x401, 0x8, 0x9, 0x80000000, 0x9, 0x8000, 0x1ff, 0x2, 0x400, 0x8, 0x8000, 0x75, 0x6, 0x0, 0x3, 0x800, 0x9, 0x0, 0xdae, 0x9efc, 0x67, 0x401, 0xffffe130, 0x7, 0x0, 0x0, 0x3, 0xf768, 0x2, 0x4, 0x4, 0xd335, 0x7fffffff, 0x1, 0x0, 0x40, 0x9, 0x80000000, 0x0, 0x6, 0xffffffff, 0x200, 0x1, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x1, 0x81, 0x8, 0x8, 0x8, 0x0, 0x10000, 0x40, 0x3, 0x3, 0x3d056ec0, 0x9, 0x3, 0x1ff, 0xb5, 0x2, 0x4, 0x1ff, 0xef1d, 0x1, 0x4, 0x10001, 0x7fff, 0x1, 0x100, 0xfffffffd, 0x1, 0x9, 0x6, 0xca8f, 0xffffffff, 0x400, 0x3, 0x1e3b2463, 0x101, 0x401, 0x3f, 0x42c, 0x4, 0x10001, 0x62d, 0x0, 0x20, 0x5, 0x10000, 0x9, 0x1, 0xe123, 0x2, 0x1, 0xffff8000, 0x8, 0x3, 0x8001, 0xff, 0x3, 0x401, 0x100, 0x8000, 0x9, 0xcfc, 0xfffffffe, 0x8001, 0x4, 0xffff, 0xb9, 0x7, 0x0, 0x4, 0x1000, 0x1, 0x7ff, 0x7, 0x1, 0x0, 0xaff, 0x2, 0x8da, 0x99e, 0x0, 0x0, 0x5, 0x3, 0x20, 0x3f, 0x4, 0x3ff, 0x0, 0xeb76, 0x106, 0x1, 0x3, 0x80, 0x6, 0x9, 0x5, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x5, 0x1ff, 0x763, 0x80000000, 0xc, 0xe9, 0x3f, 0x1, 0xd7d2, 0x0, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x14, 0x2, 0x1, 0x3, 0xff, 0x80000001, 0xb7, 0x2e, 0x6, 0x61b, 0x3, 0x0, 0x3, 0x8001, 0x8, 0x5, 0xb2c, 0x101, 0x200, 0x3f, 0x7fff, 0x3, 0x2, 0x10000, 0x400, 0x2c, 0xcb5d, 0x7, 0x96c, 0x2, 0x7fff, 0x0, 0x80, 0x6, 0x5, 0x0, 0xf192, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x9, 0xd7fd, 0x4, 0x7, 0x5, 0x945, 0xfffffffc, 0x1, 0xfffff48a, 0x5, 0x5, 0xe0, 0x4, 0x3, 0x9, 0x80000000, 0x1f, 0x200, 0x0, 0xd8b, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0xffffffff, 0xffff, 0x401, 0x5, 0x4, 0x7fffffff, 0x8, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x0, 0xddd3, 0x2, 0x400000, 0x8, 0x40, 0x5d96, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x0, 0xc92, 0x100, 0x5, 0x6, 0x4, 0x9, 0x6, 0x101, 0x7, 0x7fff, 0x36e, 0x20, 0x20, 0x100, 0x200, 0xd874, 0x2, 0x20000, 0xd3, 0x8001, 0x3fc000, 0x3, 0x5, 0x40, 0x5, 0x4, 0x0, 0x9, 0x9, 0xff8, 0x7fff, 0x6, 0x1, 0x80000000, 0x8, 0x9, 0xf0, 0x200, 0x9, 0x10001, 0x0, 0x4d, 0x8000, 0xcd60, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x1f, 0x8, 0xfffffff8, 0x4, 0x6, 0x0, 0x5, 0x400, 0x4, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7f, 0xad9, 0x1, 0x7, 0x8000, 0x6, 0x2, 0x100, 0x9, 0x4, 0x1f, 0x200, 0x7, 0x2, 0x8, 0x7, 0x0, 0x8, 0x8, 0x40, 0xffffffff, 0x8, 0xfffffffc, 0x9, 0x8, 0x1, 0x8, 0xf7c, 0x9, 0x0, 0x2, 0x3, 0x10001, 0x97, 0x6, 0x9, 0x40, 0x7fff, 0xfffffff7, 0x463, 0x3, 0x2, 0x9, 0x15, 0x6, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0xe5e, 0x7f, 0x8, 0x4, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x1000, 0x7ff, 0x7, 0x3f, 0xff, 0x7, 0x4592, 0x1, 0x4, 0x2, 0x91f, 0x8, 0x4, 0x1, 0x100, 0x6cc6e587, 0xfffeffff, 0x8, 0x3f, 0x6, 0x5, 0x10001, 0x80000000, 0x4, 0x4, 0x8, 0x4, 0x8, 0x8, 0x6, 0xffff7a04, 0x9, 0xe1f, 0x0, 0x7, 0x9, 0x1ff, 0x400, 0x800, 0x3, 0x8001, 0x9, 0x4, 0x0, 0x5, 0xfff, 0x5, 0x9, 0x9, 0xf4, 0xff, 0x9, 0x83, 0x1, 0x7fffffff, 0x800, 0x401, 0xe68, 0x1a, 0x8000, 0xffff, 0x368, 0x5, 0x4, 0x3, 0x7, 0x9, 0x6d, 0x1, 0x9, 0xe2, 0x3, 0x0, 0x9, 0x0, 0x10001, 0x4a6909f, 0x1c, 0x6, 0x9, 0x560, 0x6, 0x10001, 0x1f7, 0x705, 0x5, 0x1435, 0x2, 0x6, 0x1ff, 0x20, 0xfffffff8, 0x4, 0x1, 0x100, 0xfffffffa, 0x9, 0x40, 0xfffffff9, 0x4, 0x9, 0x81, 0x6f5f, 0x81, 0xff, 0x7, 0x0, 0x4, 0x5, 0x8, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x0, 0x4, 0x3, 0x512, 0x7, 0x40, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0xffffed81, 0x7, 0x7, 0x1, 0x3, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x2, 0x2, 0x9, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4454, 0x6, 0x40dc, 0x8, 0x99ad, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5, 0xdfda, 0x0, 0x100, 0x2, 0x8, 0x37800000, 0x1, 0x1, 0x81, 0xc94c, 0x5, 0x80, 0x20, 0x7, 0x4, 0x3, 0x8, 0x711, 0x3e, 0x200, 0x6, 0x4b, 0x1f, 0x8, 0x2, 0x101, 0xd2c, 0x62fd1a7, 0x0, 0x9, 0x2, 0x1, 0x9, 0x0, 0x6ea, 0x6, 0x20, 0x8, 0xfffffff9, 0x8000, 0x20, 0x720f, 0x4, 0x4, 0x2, 0x1000, 0x5587, 0x800, 0xffff, 0xc30, 0x5, 0x7, 0x4, 0x8, 0x3c6e, 0x36000000, 0x1, 0x10, 0x800, 0x7, 0xebc7, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7, 0x7, 0x9, 0xffffffff, 0x0, 0x7f, 0x101, 0x1, 0x700, 0xf4a, 0x5, 0x3, 0x40, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x20, 0x6, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x5, 0x5, 0x6, 0x0, 0x7, 0x19, 0x9, 0x1f, 0x9, 0x800, 0x6, 0x9, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x33, 0x0, 0x80000001, 0xdd, 0xffff, 0x80000001, 0x1, 0x8, 0x2, 0x8, 0x8, 0x1, 0x1, 0x401, 0xffffffc0, 0x8, 0x8, 0xffffd848, 0x2]}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001540)={0x43, 0x9, 0x2, {0x8, 0x3, 0xffffffff, 0x4, 0x7f, 0x7f, 0x80, 0x8, 0xc642}}, 0x43) write$P9_RATTACH(r1, &(0x7f00000015c0)={0x14, 0x69, 0x2, {0x1, 0x0, 0x6}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'gretap0\x00', 0x0}) r4 = accept(r0, &(0x7f0000001640)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000016c0)=0x80) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000001740)={0x0, @l2={0x1f, 0xff13, @any, 0x81, 0x2}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3}}, @llc={0x1a, 0x10f, 0x20, 0x9, 0x15, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x27d, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000001700)='ip6gretap0\x00', 0x401, 0x3, 0x1ff}) write$P9_RREMOVE(r0, &(0x7f00000017c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001840)={0x0, @multicast1, @multicast2}, &(0x7f0000001880)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000018c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001900)={'tunl0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001e40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e00)={&(0x7f0000001a80)={0x370, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r3}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x28}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r3}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa281}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf520}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x370}, 0x1, 0x0, 0x0, 0x880}, 0x8040) 03:26:36 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x40010, 0xffffffffffffffff, 0xa5ad3000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @initdev}, &(0x7f0000000040)=0xc) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r2 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xca0}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x1, 0x5, 0x3}, {0x0, 0x0, 0x7, 0x3f}, {0x4, 0x3, 0x1c, 0x5}, {0x3f, 0x7, 0x8c, 0x8001}, {0x6, 0x81, 0x5, 0x3ff}, {0x6, 0x20, 0x4, 0x4}, {0x2, 0x2, 0x0, 0x1000}, {0x6, 0x7, 0x0, 0x3484}, {0x1f, 0x1, 0x5, 0xa7b}, {0x6, 0x88, 0x1, 0xa00000}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x240040c0}, 0x44804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x72}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x80) getsockname(r1, &(0x7f0000000600)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, &(0x7f0000000680)=0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf4, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000000}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48d4}, 0x20048000) r8 = accept(r1, &(0x7f0000000880)=@hci, &(0x7f0000000900)=0x80) getsockname(r8, &(0x7f0000000940)=@generic, &(0x7f00000009c0)=0x80) r9 = memfd_secret(0x0) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000a40)={0x0, @phonet={0x23, 0x6c, 0x4, 0x2f}, @qipcrtr={0x2a, 0x1}, @ax25={0x3, @null, 0x8}, 0x8000, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000a00)='wg1\x00', 0x4, 0x9e1, 0x8}) r10 = socket$inet(0x2, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000ac0)={'vlan1\x00'}) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) 03:26:36 executing program 6: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0xdf, 0x75, 0x2, {0xd4, "b275d947f5f8de0d9e8e74b350e3d6b6b5f0f28b685f9798d1424413b696397acccdca8a9b612efaf1e0971c4723dac113fdc6df952912f2168cb3815f103424f08a651c6507b96983cf64a6a71fb3c2023980b193fc04202c65a4479ee0f019d6fc8917c3b4c075915460b88b3204c0da5c8e9d07f75721ccafbcde84ec0b9dc5c2a246bfe79d54b0d7468a6040b609e784070f7219e9e7d29ea12a742e8883bcb0567530400c8c96f2512390b927453dd71a9f090467d6c6335464cff68a39dd99b332c0161f07fc3c2e13d0b1358cdc20a092"}}, 0xdf) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0xde1a, 0xfff, {0x20, 0x4, 0x8}, 0x4a000000, 0x20, 0x8ee, 0x6, 0x2, ')&', 0x1, '!', 0x1, '#', 0x2, '%$'}, 0x1, '\\', 0xffffffffffffffff, 0xee01}}, 0x4f) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x1, 0x2, 0x3}}, 0x14) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000280)={0x9, 0x7, 0x1}, 0x9) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x33, 0x2}, 0x7) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104800) write$P9_RLERRORu(r0, &(0x7f0000000340)={0xe, 0x7, 0x2, {{0x1, '\\'}, 0x9a74}}, 0xe) write$P9_RLERRORu(r0, &(0x7f0000000380)={0xe, 0x7, 0x1, {{0x1, '#'}, 0x9}}, 0xe) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCLUNK(r2, &(0x7f0000000400)={0x7, 0x79, 0x2}, 0x7) r3 = memfd_secret(0x80000) write$P9_RXATTRWALK(r3, &(0x7f0000000440)={0xf, 0x1f, 0x2, 0x9}, 0xf) write$P9_RREADDIR(r0, &(0x7f0000000480)={0x122, 0x29, 0x1, {0x4, [{{0x80, 0x1, 0x4}, 0x7f, 0x2d, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x5, 0x6, 0x7, './file0'}, {{0x4, 0x3, 0x6}, 0x7, 0x6, 0x7, './file0'}, {{0x43, 0x0, 0x4}, 0xffffffffffffff01, 0x8, 0x7, './file0'}, {{0x4, 0x4, 0x2}, 0x286, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x2, 0x1}, 0x1000, 0x7, 0x7, './file0'}, {{0x20, 0x0, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x1, 0x3}, 0x6, 0x4, 0x7, './file0'}]}}, 0x122) write$P9_RREAD(r1, &(0x7f00000005c0)={0x4b, 0x75, 0x1, {0x40, "43747de04873d2a8d07cd050afe9ca3658dcc402633223e2dc04ee32b81f68c81d136033b36631cc325407d42c3f8aebec81cd4d12a6caf677f5f80b63a1c4e6"}}, 0x4b) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7b, 0x1}, 0x7) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000680)={0xb27e, 0xfffffffa, 0x5}) write$P9_RUNLINKAT(r0, &(0x7f00000006c0)={0x7, 0x4d, 0x1}, 0x7) [ 61.667961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.670320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.672077] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.685313] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.689739] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.692909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.713733] Bluetooth: hci0: HCI_REQ-0x0c1a [ 61.714927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.717082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.719248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.721687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.732810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.743713] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.753701] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.760960] Bluetooth: hci1: HCI_REQ-0x0c1a [ 61.794906] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.797184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.800761] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.803021] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.805983] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.806716] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.808157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.810105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.810953] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.811312] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.817260] Bluetooth: hci2: HCI_REQ-0x0c1a [ 61.828037] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.828116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.831155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.835661] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.837040] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.839628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.840883] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.843533] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.845249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.847183] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.848704] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.855710] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.855778] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.859871] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.861403] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.863226] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 61.864589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.868800] Bluetooth: hci5: HCI_REQ-0x0c1a [ 61.875416] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.879299] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 61.884253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.891312] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.902103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.906161] Bluetooth: hci4: HCI_REQ-0x0c1a [ 61.916901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.917920] Bluetooth: hci7: HCI_REQ-0x0c1a [ 61.939876] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 61.943969] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 61.952318] Bluetooth: hci3: HCI_REQ-0x0c1a [ 61.984059] Bluetooth: hci6: HCI_REQ-0x0c1a [ 63.749124] Bluetooth: hci0: command 0x0409 tx timeout [ 63.811541] Bluetooth: hci1: command 0x0409 tx timeout [ 63.875534] Bluetooth: hci5: command 0x0409 tx timeout [ 63.876511] Bluetooth: hci2: command 0x0409 tx timeout [ 63.939818] Bluetooth: hci4: command 0x0409 tx timeout [ 64.003539] Bluetooth: hci3: command 0x0409 tx timeout [ 64.005117] Bluetooth: hci6: command 0x0409 tx timeout [ 64.005649] Bluetooth: hci7: command 0x0409 tx timeout [ 65.796546] Bluetooth: hci0: command 0x041b tx timeout [ 65.859659] Bluetooth: hci1: command 0x041b tx timeout [ 65.923618] Bluetooth: hci2: command 0x041b tx timeout [ 65.924370] Bluetooth: hci5: command 0x041b tx timeout [ 65.987647] Bluetooth: hci4: command 0x041b tx timeout [ 66.051690] Bluetooth: hci7: command 0x041b tx timeout [ 66.052423] Bluetooth: hci6: command 0x041b tx timeout [ 66.053182] Bluetooth: hci3: command 0x041b tx timeout [ 67.843562] Bluetooth: hci0: command 0x040f tx timeout [ 67.907580] Bluetooth: hci1: command 0x040f tx timeout [ 67.971705] Bluetooth: hci5: command 0x040f tx timeout [ 67.972529] Bluetooth: hci2: command 0x040f tx timeout [ 68.035614] Bluetooth: hci4: command 0x040f tx timeout [ 68.099636] Bluetooth: hci3: command 0x040f tx timeout [ 68.100383] Bluetooth: hci6: command 0x040f tx timeout [ 68.101167] Bluetooth: hci7: command 0x040f tx timeout [ 69.892567] Bluetooth: hci0: command 0x0419 tx timeout [ 69.956631] Bluetooth: hci1: command 0x0419 tx timeout [ 70.020503] Bluetooth: hci2: command 0x0419 tx timeout [ 70.020959] Bluetooth: hci5: command 0x0419 tx timeout [ 70.084551] Bluetooth: hci4: command 0x0419 tx timeout [ 70.148516] Bluetooth: hci7: command 0x0419 tx timeout [ 70.148980] Bluetooth: hci6: command 0x0419 tx timeout [ 70.149376] Bluetooth: hci3: command 0x0419 tx timeout [ 117.989070] audit: type=1400 audit(1664681254.289:7): avc: denied { open } for pid=3794 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 03:27:34 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLERROR(r0, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '%'}}, 0xa) write$P9_RREAD(r0, &(0x7f0000000040)={0x10a, 0x75, 0x1, {0xff, "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"}}, 0x10a) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x81, 0xf9, 0x1, 0x0, 0x68, 0x240, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100c0, 0xf1, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x30, 0x8, 0x0, 0x0, 0x8, 0x200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1400, 0x6, 0xffffffff, 0x3, 0x5, 0xff, 0x3ff, 0x0, 0x100, 0x0, 0x100000000}, 0x0, 0x7, r1, 0x4) write$P9_RLERROR(r0, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x841) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x39, 0x10601) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/93) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000500)={{0x3, 0x100, 0x1, 0xc11, 0x2, 0x81}, 0xf6, [0x8, 0x401, 0x3f, 0x1, 0x10000, 0x3, 0x1ff, 0x5, 0x101, 0x9, 0x3, 0x3, 0x6, 0x7, 0x0, 0x5, 0x100, 0x7ff, 0x7ff, 0x0, 0x7fff, 0x7, 0x0, 0x8542, 0xa, 0xfffffff9, 0x1, 0x6, 0x82, 0x7, 0x5, 0x5, 0xff, 0x2, 0x80000001, 0x0, 0x10001, 0x0, 0x3ff, 0x2, 0x5, 0x1, 0x5, 0x1, 0x1, 0xeb9f, 0x8, 0x8001, 0x4, 0x6, 0x401, 0x8, 0x1, 0x20, 0xef, 0x0, 0x200, 0x2, 0x3, 0x8, 0xfffffffd, 0x3, 0x7, 0x56, 0x9bd6, 0x7, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x14000000, 0x7fffffff, 0x7, 0x1ff, 0x56, 0x8001, 0x400, 0x4, 0x8000, 0xfff, 0x3, 0x4, 0x3ff, 0x3, 0x1, 0x1f, 0xfff, 0x200, 0x9, 0x7, 0x3c3f, 0xfff, 0x5, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0x7, 0x4, 0x6, 0x101, 0x0, 0x7, 0x7, 0x400, 0xd1, 0x10001, 0x6, 0x1, 0x100, 0x3, 0x7, 0x4, 0x7fff, 0x2, 0x5, 0xf2, 0x113d70bb, 0x3, 0xffffffff, 0x1f, 0x20, 0x6, 0x8, 0x401, 0x6, 0x7f, 0x6, 0x3f, 0x3, 0x401, 0x5, 0x1, 0x80, 0x8, 0x10000, 0x7fff, 0x1, 0x1, 0x10000, 0x9, 0x5a7e9d0f, 0x4, 0x6, 0x8, 0x100, 0x8000, 0xfffffffc, 0x371b, 0x1, 0xd0, 0x1, 0x6, 0x200, 0x1, 0x675, 0xfffff229, 0x9, 0x2, 0x5, 0x3, 0x200, 0x30000, 0x1000, 0x4, 0xfffffeff, 0x5, 0x5, 0x100, 0x7, 0x10001, 0x1, 0x8, 0x8, 0x7fffffff, 0x8, 0x6, 0x7f, 0x5, 0x8, 0x8, 0x7fff, 0x2, 0x82b, 0x8001, 0x5, 0x5, 0x1f, 0x67, 0x20, 0x0, 0x1, 0x7, 0x101, 0x3, 0x0, 0xe69, 0x800, 0x0, 0x8, 0x1ff, 0xa4e1, 0xc92, 0x3, 0xa2e6, 0xfffffbff, 0x2, 0x0, 0x3, 0x3, 0x5, 0x0, 0x6f861b8b, 0x6, 0x80000001, 0x7217e9fb, 0x1, 0x401, 0x80, 0x7a880, 0x5, 0x0, 0x72e, 0x81, 0x40, 0x1000, 0x80000001, 0x4, 0x3, 0x1f, 0x37, 0x100, 0xce9, 0x80, 0x4, 0x80, 0x0, 0x200, 0x3, 0xfff, 0x7, 0x3f, 0x3, 0x80000001, 0x7, 0x3, 0x1ef, 0xfffffffb, 0x1, 0x2e5, 0x1, 0x101, 0x9, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x8, 0xfa7e, 0x401, 0x7, 0x0, 0x8d8, 0xbe6, 0x3, 0xec, 0x1, 0x9e, 0x6, 0x3, 0x1ff, 0xd373, 0x100, 0xe7, 0x0, 0xfffffffc, 0x1, 0x61877ea5, 0x9, 0x80000000, 0x200, 0x1, 0x0, 0x6f9, 0x2, 0x7fff, 0x5, 0x1ff, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x5, 0x4, 0xd040, 0x7fffffff, 0x7, 0x1, 0x2, 0x877a, 0x4, 0x35f, 0x9, 0x2, 0x2, 0x4, 0xffffffff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0xfffffffd, 0xd6c9, 0x5, 0x6, 0x7f, 0x20, 0x4, 0x3, 0xfffffff8, 0x401, 0x8, 0x9, 0x80000000, 0x9, 0x8000, 0x1ff, 0x2, 0x400, 0x8, 0x8000, 0x75, 0x6, 0x0, 0x3, 0x800, 0x9, 0x0, 0xdae, 0x9efc, 0x67, 0x401, 0xffffe130, 0x7, 0x0, 0x0, 0x3, 0xf768, 0x2, 0x4, 0x4, 0xd335, 0x7fffffff, 0x1, 0x0, 0x40, 0x9, 0x80000000, 0x0, 0x6, 0xffffffff, 0x200, 0x1, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x1, 0x81, 0x8, 0x8, 0x8, 0x0, 0x10000, 0x40, 0x3, 0x3, 0x3d056ec0, 0x9, 0x3, 0x1ff, 0xb5, 0x2, 0x4, 0x1ff, 0xef1d, 0x1, 0x4, 0x10001, 0x7fff, 0x1, 0x100, 0xfffffffd, 0x1, 0x9, 0x6, 0xca8f, 0xffffffff, 0x400, 0x3, 0x1e3b2463, 0x101, 0x401, 0x3f, 0x42c, 0x4, 0x10001, 0x62d, 0x0, 0x20, 0x5, 0x10000, 0x9, 0x1, 0xe123, 0x2, 0x1, 0xffff8000, 0x8, 0x3, 0x8001, 0xff, 0x3, 0x401, 0x100, 0x8000, 0x9, 0xcfc, 0xfffffffe, 0x8001, 0x4, 0xffff, 0xb9, 0x7, 0x0, 0x4, 0x1000, 0x1, 0x7ff, 0x7, 0x1, 0x0, 0xaff, 0x2, 0x8da, 0x99e, 0x0, 0x0, 0x5, 0x3, 0x20, 0x3f, 0x4, 0x3ff, 0x0, 0xeb76, 0x106, 0x1, 0x3, 0x80, 0x6, 0x9, 0x5, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x5, 0x1ff, 0x763, 0x80000000, 0xc, 0xe9, 0x3f, 0x1, 0xd7d2, 0x0, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x14, 0x2, 0x1, 0x3, 0xff, 0x80000001, 0xb7, 0x2e, 0x6, 0x61b, 0x3, 0x0, 0x3, 0x8001, 0x8, 0x5, 0xb2c, 0x101, 0x200, 0x3f, 0x7fff, 0x3, 0x2, 0x10000, 0x400, 0x2c, 0xcb5d, 0x7, 0x96c, 0x2, 0x7fff, 0x0, 0x80, 0x6, 0x5, 0x0, 0xf192, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x9, 0xd7fd, 0x4, 0x7, 0x5, 0x945, 0xfffffffc, 0x1, 0xfffff48a, 0x5, 0x5, 0xe0, 0x4, 0x3, 0x9, 0x80000000, 0x1f, 0x200, 0x0, 0xd8b, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0xffffffff, 0xffff, 0x401, 0x5, 0x4, 0x7fffffff, 0x8, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x0, 0xddd3, 0x2, 0x400000, 0x8, 0x40, 0x5d96, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x0, 0xc92, 0x100, 0x5, 0x6, 0x4, 0x9, 0x6, 0x101, 0x7, 0x7fff, 0x36e, 0x20, 0x20, 0x100, 0x200, 0xd874, 0x2, 0x20000, 0xd3, 0x8001, 0x3fc000, 0x3, 0x5, 0x40, 0x5, 0x4, 0x0, 0x9, 0x9, 0xff8, 0x7fff, 0x6, 0x1, 0x80000000, 0x8, 0x9, 0xf0, 0x200, 0x9, 0x10001, 0x0, 0x4d, 0x8000, 0xcd60, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x1f, 0x8, 0xfffffff8, 0x4, 0x6, 0x0, 0x5, 0x400, 0x4, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7f, 0xad9, 0x1, 0x7, 0x8000, 0x6, 0x2, 0x100, 0x9, 0x4, 0x1f, 0x200, 0x7, 0x2, 0x8, 0x7, 0x0, 0x8, 0x8, 0x40, 0xffffffff, 0x8, 0xfffffffc, 0x9, 0x8, 0x1, 0x8, 0xf7c, 0x9, 0x0, 0x2, 0x3, 0x10001, 0x97, 0x6, 0x9, 0x40, 0x7fff, 0xfffffff7, 0x463, 0x3, 0x2, 0x9, 0x15, 0x6, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0xe5e, 0x7f, 0x8, 0x4, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x1000, 0x7ff, 0x7, 0x3f, 0xff, 0x7, 0x4592, 0x1, 0x4, 0x2, 0x91f, 0x8, 0x4, 0x1, 0x100, 0x6cc6e587, 0xfffeffff, 0x8, 0x3f, 0x6, 0x5, 0x10001, 0x80000000, 0x4, 0x4, 0x8, 0x4, 0x8, 0x8, 0x6, 0xffff7a04, 0x9, 0xe1f, 0x0, 0x7, 0x9, 0x1ff, 0x400, 0x800, 0x3, 0x8001, 0x9, 0x4, 0x0, 0x5, 0xfff, 0x5, 0x9, 0x9, 0xf4, 0xff, 0x9, 0x83, 0x1, 0x7fffffff, 0x800, 0x401, 0xe68, 0x1a, 0x8000, 0xffff, 0x368, 0x5, 0x4, 0x3, 0x7, 0x9, 0x6d, 0x1, 0x9, 0xe2, 0x3, 0x0, 0x9, 0x0, 0x10001, 0x4a6909f, 0x1c, 0x6, 0x9, 0x560, 0x6, 0x10001, 0x1f7, 0x705, 0x5, 0x1435, 0x2, 0x6, 0x1ff, 0x20, 0xfffffff8, 0x4, 0x1, 0x100, 0xfffffffa, 0x9, 0x40, 0xfffffff9, 0x4, 0x9, 0x81, 0x6f5f, 0x81, 0xff, 0x7, 0x0, 0x4, 0x5, 0x8, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x0, 0x4, 0x3, 0x512, 0x7, 0x40, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0xffffed81, 0x7, 0x7, 0x1, 0x3, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x2, 0x2, 0x9, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4454, 0x6, 0x40dc, 0x8, 0x99ad, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5, 0xdfda, 0x0, 0x100, 0x2, 0x8, 0x37800000, 0x1, 0x1, 0x81, 0xc94c, 0x5, 0x80, 0x20, 0x7, 0x4, 0x3, 0x8, 0x711, 0x3e, 0x200, 0x6, 0x4b, 0x1f, 0x8, 0x2, 0x101, 0xd2c, 0x62fd1a7, 0x0, 0x9, 0x2, 0x1, 0x9, 0x0, 0x6ea, 0x6, 0x20, 0x8, 0xfffffff9, 0x8000, 0x20, 0x720f, 0x4, 0x4, 0x2, 0x1000, 0x5587, 0x800, 0xffff, 0xc30, 0x5, 0x7, 0x4, 0x8, 0x3c6e, 0x36000000, 0x1, 0x10, 0x800, 0x7, 0xebc7, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7, 0x7, 0x9, 0xffffffff, 0x0, 0x7f, 0x101, 0x1, 0x700, 0xf4a, 0x5, 0x3, 0x40, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x20, 0x6, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x5, 0x5, 0x6, 0x0, 0x7, 0x19, 0x9, 0x1f, 0x9, 0x800, 0x6, 0x9, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x33, 0x0, 0x80000001, 0xdd, 0xffff, 0x80000001, 0x1, 0x8, 0x2, 0x8, 0x8, 0x1, 0x1, 0x401, 0xffffffc0, 0x8, 0x8, 0xffffd848, 0x2]}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001540)={0x43, 0x9, 0x2, {0x8, 0x3, 0xffffffff, 0x4, 0x7f, 0x7f, 0x80, 0x8, 0xc642}}, 0x43) write$P9_RATTACH(r1, &(0x7f00000015c0)={0x14, 0x69, 0x2, {0x1, 0x0, 0x6}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'gretap0\x00', 0x0}) r4 = accept(r0, &(0x7f0000001640)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000016c0)=0x80) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000001740)={0x0, @l2={0x1f, 0xff13, @any, 0x81, 0x2}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3}}, @llc={0x1a, 0x10f, 0x20, 0x9, 0x15, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x27d, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000001700)='ip6gretap0\x00', 0x401, 0x3, 0x1ff}) write$P9_RREMOVE(r0, &(0x7f00000017c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001840)={0x0, @multicast1, @multicast2}, &(0x7f0000001880)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000018c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001900)={'tunl0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001e40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e00)={&(0x7f0000001a80)={0x370, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r3}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x28}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r3}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa281}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf520}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x370}, 0x1, 0x0, 0x0, 0x880}, 0x8040) 03:27:34 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLERROR(r0, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '%'}}, 0xa) write$P9_RREAD(r0, &(0x7f0000000040)={0x10a, 0x75, 0x1, {0xff, "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"}}, 0x10a) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x81, 0xf9, 0x1, 0x0, 0x68, 0x240, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100c0, 0xf1, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x30, 0x8, 0x0, 0x0, 0x8, 0x200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1400, 0x6, 0xffffffff, 0x3, 0x5, 0xff, 0x3ff, 0x0, 0x100, 0x0, 0x100000000}, 0x0, 0x7, r1, 0x4) write$P9_RLERROR(r0, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x841) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x39, 0x10601) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/93) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000500)={{0x3, 0x100, 0x1, 0xc11, 0x2, 0x81}, 0xf6, [0x8, 0x401, 0x3f, 0x1, 0x10000, 0x3, 0x1ff, 0x5, 0x101, 0x9, 0x3, 0x3, 0x6, 0x7, 0x0, 0x5, 0x100, 0x7ff, 0x7ff, 0x0, 0x7fff, 0x7, 0x0, 0x8542, 0xa, 0xfffffff9, 0x1, 0x6, 0x82, 0x7, 0x5, 0x5, 0xff, 0x2, 0x80000001, 0x0, 0x10001, 0x0, 0x3ff, 0x2, 0x5, 0x1, 0x5, 0x1, 0x1, 0xeb9f, 0x8, 0x8001, 0x4, 0x6, 0x401, 0x8, 0x1, 0x20, 0xef, 0x0, 0x200, 0x2, 0x3, 0x8, 0xfffffffd, 0x3, 0x7, 0x56, 0x9bd6, 0x7, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x14000000, 0x7fffffff, 0x7, 0x1ff, 0x56, 0x8001, 0x400, 0x4, 0x8000, 0xfff, 0x3, 0x4, 0x3ff, 0x3, 0x1, 0x1f, 0xfff, 0x200, 0x9, 0x7, 0x3c3f, 0xfff, 0x5, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0x7, 0x4, 0x6, 0x101, 0x0, 0x7, 0x7, 0x400, 0xd1, 0x10001, 0x6, 0x1, 0x100, 0x3, 0x7, 0x4, 0x7fff, 0x2, 0x5, 0xf2, 0x113d70bb, 0x3, 0xffffffff, 0x1f, 0x20, 0x6, 0x8, 0x401, 0x6, 0x7f, 0x6, 0x3f, 0x3, 0x401, 0x5, 0x1, 0x80, 0x8, 0x10000, 0x7fff, 0x1, 0x1, 0x10000, 0x9, 0x5a7e9d0f, 0x4, 0x6, 0x8, 0x100, 0x8000, 0xfffffffc, 0x371b, 0x1, 0xd0, 0x1, 0x6, 0x200, 0x1, 0x675, 0xfffff229, 0x9, 0x2, 0x5, 0x3, 0x200, 0x30000, 0x1000, 0x4, 0xfffffeff, 0x5, 0x5, 0x100, 0x7, 0x10001, 0x1, 0x8, 0x8, 0x7fffffff, 0x8, 0x6, 0x7f, 0x5, 0x8, 0x8, 0x7fff, 0x2, 0x82b, 0x8001, 0x5, 0x5, 0x1f, 0x67, 0x20, 0x0, 0x1, 0x7, 0x101, 0x3, 0x0, 0xe69, 0x800, 0x0, 0x8, 0x1ff, 0xa4e1, 0xc92, 0x3, 0xa2e6, 0xfffffbff, 0x2, 0x0, 0x3, 0x3, 0x5, 0x0, 0x6f861b8b, 0x6, 0x80000001, 0x7217e9fb, 0x1, 0x401, 0x80, 0x7a880, 0x5, 0x0, 0x72e, 0x81, 0x40, 0x1000, 0x80000001, 0x4, 0x3, 0x1f, 0x37, 0x100, 0xce9, 0x80, 0x4, 0x80, 0x0, 0x200, 0x3, 0xfff, 0x7, 0x3f, 0x3, 0x80000001, 0x7, 0x3, 0x1ef, 0xfffffffb, 0x1, 0x2e5, 0x1, 0x101, 0x9, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x8, 0xfa7e, 0x401, 0x7, 0x0, 0x8d8, 0xbe6, 0x3, 0xec, 0x1, 0x9e, 0x6, 0x3, 0x1ff, 0xd373, 0x100, 0xe7, 0x0, 0xfffffffc, 0x1, 0x61877ea5, 0x9, 0x80000000, 0x200, 0x1, 0x0, 0x6f9, 0x2, 0x7fff, 0x5, 0x1ff, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x5, 0x4, 0xd040, 0x7fffffff, 0x7, 0x1, 0x2, 0x877a, 0x4, 0x35f, 0x9, 0x2, 0x2, 0x4, 0xffffffff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0xfffffffd, 0xd6c9, 0x5, 0x6, 0x7f, 0x20, 0x4, 0x3, 0xfffffff8, 0x401, 0x8, 0x9, 0x80000000, 0x9, 0x8000, 0x1ff, 0x2, 0x400, 0x8, 0x8000, 0x75, 0x6, 0x0, 0x3, 0x800, 0x9, 0x0, 0xdae, 0x9efc, 0x67, 0x401, 0xffffe130, 0x7, 0x0, 0x0, 0x3, 0xf768, 0x2, 0x4, 0x4, 0xd335, 0x7fffffff, 0x1, 0x0, 0x40, 0x9, 0x80000000, 0x0, 0x6, 0xffffffff, 0x200, 0x1, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x1, 0x81, 0x8, 0x8, 0x8, 0x0, 0x10000, 0x40, 0x3, 0x3, 0x3d056ec0, 0x9, 0x3, 0x1ff, 0xb5, 0x2, 0x4, 0x1ff, 0xef1d, 0x1, 0x4, 0x10001, 0x7fff, 0x1, 0x100, 0xfffffffd, 0x1, 0x9, 0x6, 0xca8f, 0xffffffff, 0x400, 0x3, 0x1e3b2463, 0x101, 0x401, 0x3f, 0x42c, 0x4, 0x10001, 0x62d, 0x0, 0x20, 0x5, 0x10000, 0x9, 0x1, 0xe123, 0x2, 0x1, 0xffff8000, 0x8, 0x3, 0x8001, 0xff, 0x3, 0x401, 0x100, 0x8000, 0x9, 0xcfc, 0xfffffffe, 0x8001, 0x4, 0xffff, 0xb9, 0x7, 0x0, 0x4, 0x1000, 0x1, 0x7ff, 0x7, 0x1, 0x0, 0xaff, 0x2, 0x8da, 0x99e, 0x0, 0x0, 0x5, 0x3, 0x20, 0x3f, 0x4, 0x3ff, 0x0, 0xeb76, 0x106, 0x1, 0x3, 0x80, 0x6, 0x9, 0x5, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x5, 0x1ff, 0x763, 0x80000000, 0xc, 0xe9, 0x3f, 0x1, 0xd7d2, 0x0, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x14, 0x2, 0x1, 0x3, 0xff, 0x80000001, 0xb7, 0x2e, 0x6, 0x61b, 0x3, 0x0, 0x3, 0x8001, 0x8, 0x5, 0xb2c, 0x101, 0x200, 0x3f, 0x7fff, 0x3, 0x2, 0x10000, 0x400, 0x2c, 0xcb5d, 0x7, 0x96c, 0x2, 0x7fff, 0x0, 0x80, 0x6, 0x5, 0x0, 0xf192, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x9, 0xd7fd, 0x4, 0x7, 0x5, 0x945, 0xfffffffc, 0x1, 0xfffff48a, 0x5, 0x5, 0xe0, 0x4, 0x3, 0x9, 0x80000000, 0x1f, 0x200, 0x0, 0xd8b, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0xffffffff, 0xffff, 0x401, 0x5, 0x4, 0x7fffffff, 0x8, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x0, 0xddd3, 0x2, 0x400000, 0x8, 0x40, 0x5d96, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x0, 0xc92, 0x100, 0x5, 0x6, 0x4, 0x9, 0x6, 0x101, 0x7, 0x7fff, 0x36e, 0x20, 0x20, 0x100, 0x200, 0xd874, 0x2, 0x20000, 0xd3, 0x8001, 0x3fc000, 0x3, 0x5, 0x40, 0x5, 0x4, 0x0, 0x9, 0x9, 0xff8, 0x7fff, 0x6, 0x1, 0x80000000, 0x8, 0x9, 0xf0, 0x200, 0x9, 0x10001, 0x0, 0x4d, 0x8000, 0xcd60, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x1f, 0x8, 0xfffffff8, 0x4, 0x6, 0x0, 0x5, 0x400, 0x4, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7f, 0xad9, 0x1, 0x7, 0x8000, 0x6, 0x2, 0x100, 0x9, 0x4, 0x1f, 0x200, 0x7, 0x2, 0x8, 0x7, 0x0, 0x8, 0x8, 0x40, 0xffffffff, 0x8, 0xfffffffc, 0x9, 0x8, 0x1, 0x8, 0xf7c, 0x9, 0x0, 0x2, 0x3, 0x10001, 0x97, 0x6, 0x9, 0x40, 0x7fff, 0xfffffff7, 0x463, 0x3, 0x2, 0x9, 0x15, 0x6, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0xe5e, 0x7f, 0x8, 0x4, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x1000, 0x7ff, 0x7, 0x3f, 0xff, 0x7, 0x4592, 0x1, 0x4, 0x2, 0x91f, 0x8, 0x4, 0x1, 0x100, 0x6cc6e587, 0xfffeffff, 0x8, 0x3f, 0x6, 0x5, 0x10001, 0x80000000, 0x4, 0x4, 0x8, 0x4, 0x8, 0x8, 0x6, 0xffff7a04, 0x9, 0xe1f, 0x0, 0x7, 0x9, 0x1ff, 0x400, 0x800, 0x3, 0x8001, 0x9, 0x4, 0x0, 0x5, 0xfff, 0x5, 0x9, 0x9, 0xf4, 0xff, 0x9, 0x83, 0x1, 0x7fffffff, 0x800, 0x401, 0xe68, 0x1a, 0x8000, 0xffff, 0x368, 0x5, 0x4, 0x3, 0x7, 0x9, 0x6d, 0x1, 0x9, 0xe2, 0x3, 0x0, 0x9, 0x0, 0x10001, 0x4a6909f, 0x1c, 0x6, 0x9, 0x560, 0x6, 0x10001, 0x1f7, 0x705, 0x5, 0x1435, 0x2, 0x6, 0x1ff, 0x20, 0xfffffff8, 0x4, 0x1, 0x100, 0xfffffffa, 0x9, 0x40, 0xfffffff9, 0x4, 0x9, 0x81, 0x6f5f, 0x81, 0xff, 0x7, 0x0, 0x4, 0x5, 0x8, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x0, 0x4, 0x3, 0x512, 0x7, 0x40, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0xffffed81, 0x7, 0x7, 0x1, 0x3, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x2, 0x2, 0x9, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4454, 0x6, 0x40dc, 0x8, 0x99ad, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5, 0xdfda, 0x0, 0x100, 0x2, 0x8, 0x37800000, 0x1, 0x1, 0x81, 0xc94c, 0x5, 0x80, 0x20, 0x7, 0x4, 0x3, 0x8, 0x711, 0x3e, 0x200, 0x6, 0x4b, 0x1f, 0x8, 0x2, 0x101, 0xd2c, 0x62fd1a7, 0x0, 0x9, 0x2, 0x1, 0x9, 0x0, 0x6ea, 0x6, 0x20, 0x8, 0xfffffff9, 0x8000, 0x20, 0x720f, 0x4, 0x4, 0x2, 0x1000, 0x5587, 0x800, 0xffff, 0xc30, 0x5, 0x7, 0x4, 0x8, 0x3c6e, 0x36000000, 0x1, 0x10, 0x800, 0x7, 0xebc7, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7, 0x7, 0x9, 0xffffffff, 0x0, 0x7f, 0x101, 0x1, 0x700, 0xf4a, 0x5, 0x3, 0x40, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x20, 0x6, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x5, 0x5, 0x6, 0x0, 0x7, 0x19, 0x9, 0x1f, 0x9, 0x800, 0x6, 0x9, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x33, 0x0, 0x80000001, 0xdd, 0xffff, 0x80000001, 0x1, 0x8, 0x2, 0x8, 0x8, 0x1, 0x1, 0x401, 0xffffffc0, 0x8, 0x8, 0xffffd848, 0x2]}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001540)={0x43, 0x9, 0x2, {0x8, 0x3, 0xffffffff, 0x4, 0x7f, 0x7f, 0x80, 0x8, 0xc642}}, 0x43) write$P9_RATTACH(r1, &(0x7f00000015c0)={0x14, 0x69, 0x2, {0x1, 0x0, 0x6}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'gretap0\x00', 0x0}) r4 = accept(r0, &(0x7f0000001640)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000016c0)=0x80) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000001740)={0x0, @l2={0x1f, 0xff13, @any, 0x81, 0x2}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3}}, @llc={0x1a, 0x10f, 0x20, 0x9, 0x15, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x27d, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000001700)='ip6gretap0\x00', 0x401, 0x3, 0x1ff}) write$P9_RREMOVE(r0, &(0x7f00000017c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001840)={0x0, @multicast1, @multicast2}, &(0x7f0000001880)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000018c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001900)={'tunl0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001e40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e00)={&(0x7f0000001a80)={0x370, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r3}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x28}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r3}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa281}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf520}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x370}, 0x1, 0x0, 0x0, 0x880}, 0x8040) 03:27:34 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLERROR(r0, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '%'}}, 0xa) write$P9_RREAD(r0, &(0x7f0000000040)={0x10a, 0x75, 0x1, {0xff, "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"}}, 0x10a) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x81, 0xf9, 0x1, 0x0, 0x68, 0x240, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100c0, 0xf1, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x30, 0x8, 0x0, 0x0, 0x8, 0x200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1400, 0x6, 0xffffffff, 0x3, 0x5, 0xff, 0x3ff, 0x0, 0x100, 0x0, 0x100000000}, 0x0, 0x7, r1, 0x4) write$P9_RLERROR(r0, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x841) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x39, 0x10601) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/93) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000500)={{0x3, 0x100, 0x1, 0xc11, 0x2, 0x81}, 0xf6, [0x8, 0x401, 0x3f, 0x1, 0x10000, 0x3, 0x1ff, 0x5, 0x101, 0x9, 0x3, 0x3, 0x6, 0x7, 0x0, 0x5, 0x100, 0x7ff, 0x7ff, 0x0, 0x7fff, 0x7, 0x0, 0x8542, 0xa, 0xfffffff9, 0x1, 0x6, 0x82, 0x7, 0x5, 0x5, 0xff, 0x2, 0x80000001, 0x0, 0x10001, 0x0, 0x3ff, 0x2, 0x5, 0x1, 0x5, 0x1, 0x1, 0xeb9f, 0x8, 0x8001, 0x4, 0x6, 0x401, 0x8, 0x1, 0x20, 0xef, 0x0, 0x200, 0x2, 0x3, 0x8, 0xfffffffd, 0x3, 0x7, 0x56, 0x9bd6, 0x7, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x14000000, 0x7fffffff, 0x7, 0x1ff, 0x56, 0x8001, 0x400, 0x4, 0x8000, 0xfff, 0x3, 0x4, 0x3ff, 0x3, 0x1, 0x1f, 0xfff, 0x200, 0x9, 0x7, 0x3c3f, 0xfff, 0x5, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0x7, 0x4, 0x6, 0x101, 0x0, 0x7, 0x7, 0x400, 0xd1, 0x10001, 0x6, 0x1, 0x100, 0x3, 0x7, 0x4, 0x7fff, 0x2, 0x5, 0xf2, 0x113d70bb, 0x3, 0xffffffff, 0x1f, 0x20, 0x6, 0x8, 0x401, 0x6, 0x7f, 0x6, 0x3f, 0x3, 0x401, 0x5, 0x1, 0x80, 0x8, 0x10000, 0x7fff, 0x1, 0x1, 0x10000, 0x9, 0x5a7e9d0f, 0x4, 0x6, 0x8, 0x100, 0x8000, 0xfffffffc, 0x371b, 0x1, 0xd0, 0x1, 0x6, 0x200, 0x1, 0x675, 0xfffff229, 0x9, 0x2, 0x5, 0x3, 0x200, 0x30000, 0x1000, 0x4, 0xfffffeff, 0x5, 0x5, 0x100, 0x7, 0x10001, 0x1, 0x8, 0x8, 0x7fffffff, 0x8, 0x6, 0x7f, 0x5, 0x8, 0x8, 0x7fff, 0x2, 0x82b, 0x8001, 0x5, 0x5, 0x1f, 0x67, 0x20, 0x0, 0x1, 0x7, 0x101, 0x3, 0x0, 0xe69, 0x800, 0x0, 0x8, 0x1ff, 0xa4e1, 0xc92, 0x3, 0xa2e6, 0xfffffbff, 0x2, 0x0, 0x3, 0x3, 0x5, 0x0, 0x6f861b8b, 0x6, 0x80000001, 0x7217e9fb, 0x1, 0x401, 0x80, 0x7a880, 0x5, 0x0, 0x72e, 0x81, 0x40, 0x1000, 0x80000001, 0x4, 0x3, 0x1f, 0x37, 0x100, 0xce9, 0x80, 0x4, 0x80, 0x0, 0x200, 0x3, 0xfff, 0x7, 0x3f, 0x3, 0x80000001, 0x7, 0x3, 0x1ef, 0xfffffffb, 0x1, 0x2e5, 0x1, 0x101, 0x9, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x8, 0xfa7e, 0x401, 0x7, 0x0, 0x8d8, 0xbe6, 0x3, 0xec, 0x1, 0x9e, 0x6, 0x3, 0x1ff, 0xd373, 0x100, 0xe7, 0x0, 0xfffffffc, 0x1, 0x61877ea5, 0x9, 0x80000000, 0x200, 0x1, 0x0, 0x6f9, 0x2, 0x7fff, 0x5, 0x1ff, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x5, 0x4, 0xd040, 0x7fffffff, 0x7, 0x1, 0x2, 0x877a, 0x4, 0x35f, 0x9, 0x2, 0x2, 0x4, 0xffffffff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0xfffffffd, 0xd6c9, 0x5, 0x6, 0x7f, 0x20, 0x4, 0x3, 0xfffffff8, 0x401, 0x8, 0x9, 0x80000000, 0x9, 0x8000, 0x1ff, 0x2, 0x400, 0x8, 0x8000, 0x75, 0x6, 0x0, 0x3, 0x800, 0x9, 0x0, 0xdae, 0x9efc, 0x67, 0x401, 0xffffe130, 0x7, 0x0, 0x0, 0x3, 0xf768, 0x2, 0x4, 0x4, 0xd335, 0x7fffffff, 0x1, 0x0, 0x40, 0x9, 0x80000000, 0x0, 0x6, 0xffffffff, 0x200, 0x1, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x1, 0x81, 0x8, 0x8, 0x8, 0x0, 0x10000, 0x40, 0x3, 0x3, 0x3d056ec0, 0x9, 0x3, 0x1ff, 0xb5, 0x2, 0x4, 0x1ff, 0xef1d, 0x1, 0x4, 0x10001, 0x7fff, 0x1, 0x100, 0xfffffffd, 0x1, 0x9, 0x6, 0xca8f, 0xffffffff, 0x400, 0x3, 0x1e3b2463, 0x101, 0x401, 0x3f, 0x42c, 0x4, 0x10001, 0x62d, 0x0, 0x20, 0x5, 0x10000, 0x9, 0x1, 0xe123, 0x2, 0x1, 0xffff8000, 0x8, 0x3, 0x8001, 0xff, 0x3, 0x401, 0x100, 0x8000, 0x9, 0xcfc, 0xfffffffe, 0x8001, 0x4, 0xffff, 0xb9, 0x7, 0x0, 0x4, 0x1000, 0x1, 0x7ff, 0x7, 0x1, 0x0, 0xaff, 0x2, 0x8da, 0x99e, 0x0, 0x0, 0x5, 0x3, 0x20, 0x3f, 0x4, 0x3ff, 0x0, 0xeb76, 0x106, 0x1, 0x3, 0x80, 0x6, 0x9, 0x5, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x5, 0x1ff, 0x763, 0x80000000, 0xc, 0xe9, 0x3f, 0x1, 0xd7d2, 0x0, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x14, 0x2, 0x1, 0x3, 0xff, 0x80000001, 0xb7, 0x2e, 0x6, 0x61b, 0x3, 0x0, 0x3, 0x8001, 0x8, 0x5, 0xb2c, 0x101, 0x200, 0x3f, 0x7fff, 0x3, 0x2, 0x10000, 0x400, 0x2c, 0xcb5d, 0x7, 0x96c, 0x2, 0x7fff, 0x0, 0x80, 0x6, 0x5, 0x0, 0xf192, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x9, 0xd7fd, 0x4, 0x7, 0x5, 0x945, 0xfffffffc, 0x1, 0xfffff48a, 0x5, 0x5, 0xe0, 0x4, 0x3, 0x9, 0x80000000, 0x1f, 0x200, 0x0, 0xd8b, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0xffffffff, 0xffff, 0x401, 0x5, 0x4, 0x7fffffff, 0x8, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x0, 0xddd3, 0x2, 0x400000, 0x8, 0x40, 0x5d96, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x0, 0xc92, 0x100, 0x5, 0x6, 0x4, 0x9, 0x6, 0x101, 0x7, 0x7fff, 0x36e, 0x20, 0x20, 0x100, 0x200, 0xd874, 0x2, 0x20000, 0xd3, 0x8001, 0x3fc000, 0x3, 0x5, 0x40, 0x5, 0x4, 0x0, 0x9, 0x9, 0xff8, 0x7fff, 0x6, 0x1, 0x80000000, 0x8, 0x9, 0xf0, 0x200, 0x9, 0x10001, 0x0, 0x4d, 0x8000, 0xcd60, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x1f, 0x8, 0xfffffff8, 0x4, 0x6, 0x0, 0x5, 0x400, 0x4, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7f, 0xad9, 0x1, 0x7, 0x8000, 0x6, 0x2, 0x100, 0x9, 0x4, 0x1f, 0x200, 0x7, 0x2, 0x8, 0x7, 0x0, 0x8, 0x8, 0x40, 0xffffffff, 0x8, 0xfffffffc, 0x9, 0x8, 0x1, 0x8, 0xf7c, 0x9, 0x0, 0x2, 0x3, 0x10001, 0x97, 0x6, 0x9, 0x40, 0x7fff, 0xfffffff7, 0x463, 0x3, 0x2, 0x9, 0x15, 0x6, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0xe5e, 0x7f, 0x8, 0x4, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x1000, 0x7ff, 0x7, 0x3f, 0xff, 0x7, 0x4592, 0x1, 0x4, 0x2, 0x91f, 0x8, 0x4, 0x1, 0x100, 0x6cc6e587, 0xfffeffff, 0x8, 0x3f, 0x6, 0x5, 0x10001, 0x80000000, 0x4, 0x4, 0x8, 0x4, 0x8, 0x8, 0x6, 0xffff7a04, 0x9, 0xe1f, 0x0, 0x7, 0x9, 0x1ff, 0x400, 0x800, 0x3, 0x8001, 0x9, 0x4, 0x0, 0x5, 0xfff, 0x5, 0x9, 0x9, 0xf4, 0xff, 0x9, 0x83, 0x1, 0x7fffffff, 0x800, 0x401, 0xe68, 0x1a, 0x8000, 0xffff, 0x368, 0x5, 0x4, 0x3, 0x7, 0x9, 0x6d, 0x1, 0x9, 0xe2, 0x3, 0x0, 0x9, 0x0, 0x10001, 0x4a6909f, 0x1c, 0x6, 0x9, 0x560, 0x6, 0x10001, 0x1f7, 0x705, 0x5, 0x1435, 0x2, 0x6, 0x1ff, 0x20, 0xfffffff8, 0x4, 0x1, 0x100, 0xfffffffa, 0x9, 0x40, 0xfffffff9, 0x4, 0x9, 0x81, 0x6f5f, 0x81, 0xff, 0x7, 0x0, 0x4, 0x5, 0x8, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x0, 0x4, 0x3, 0x512, 0x7, 0x40, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0xffffed81, 0x7, 0x7, 0x1, 0x3, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x2, 0x2, 0x9, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4454, 0x6, 0x40dc, 0x8, 0x99ad, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5, 0xdfda, 0x0, 0x100, 0x2, 0x8, 0x37800000, 0x1, 0x1, 0x81, 0xc94c, 0x5, 0x80, 0x20, 0x7, 0x4, 0x3, 0x8, 0x711, 0x3e, 0x200, 0x6, 0x4b, 0x1f, 0x8, 0x2, 0x101, 0xd2c, 0x62fd1a7, 0x0, 0x9, 0x2, 0x1, 0x9, 0x0, 0x6ea, 0x6, 0x20, 0x8, 0xfffffff9, 0x8000, 0x20, 0x720f, 0x4, 0x4, 0x2, 0x1000, 0x5587, 0x800, 0xffff, 0xc30, 0x5, 0x7, 0x4, 0x8, 0x3c6e, 0x36000000, 0x1, 0x10, 0x800, 0x7, 0xebc7, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7, 0x7, 0x9, 0xffffffff, 0x0, 0x7f, 0x101, 0x1, 0x700, 0xf4a, 0x5, 0x3, 0x40, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x20, 0x6, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x5, 0x5, 0x6, 0x0, 0x7, 0x19, 0x9, 0x1f, 0x9, 0x800, 0x6, 0x9, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x33, 0x0, 0x80000001, 0xdd, 0xffff, 0x80000001, 0x1, 0x8, 0x2, 0x8, 0x8, 0x1, 0x1, 0x401, 0xffffffc0, 0x8, 0x8, 0xffffd848, 0x2]}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001540)={0x43, 0x9, 0x2, {0x8, 0x3, 0xffffffff, 0x4, 0x7f, 0x7f, 0x80, 0x8, 0xc642}}, 0x43) write$P9_RATTACH(r1, &(0x7f00000015c0)={0x14, 0x69, 0x2, {0x1, 0x0, 0x6}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'gretap0\x00', 0x0}) r4 = accept(r0, &(0x7f0000001640)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000016c0)=0x80) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000001740)={0x0, @l2={0x1f, 0xff13, @any, 0x81, 0x2}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3}}, @llc={0x1a, 0x10f, 0x20, 0x9, 0x15, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x27d, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000001700)='ip6gretap0\x00', 0x401, 0x3, 0x1ff}) write$P9_RREMOVE(r0, &(0x7f00000017c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000001840)={0x0, @multicast1, @multicast2}, &(0x7f0000001880)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000018c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001900)={'tunl0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001e40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001e00)={&(0x7f0000001a80)={0x370, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r3}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x28}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r3}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa281}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf520}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x370}, 0x1, 0x0, 0x0, 0x880}, 0x8040) 03:27:34 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLERROR(r0, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '%'}}, 0xa) write$P9_RREAD(r0, &(0x7f0000000040)={0x10a, 0x75, 0x1, {0xff, "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"}}, 0x10a) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x81, 0xf9, 0x1, 0x0, 0x68, 0x240, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100c0, 0xf1, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x30, 0x8, 0x0, 0x0, 0x8, 0x200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1400, 0x6, 0xffffffff, 0x3, 0x5, 0xff, 0x3ff, 0x0, 0x100, 0x0, 0x100000000}, 0x0, 0x7, r1, 0x4) write$P9_RLERROR(r0, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x841) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x39, 0x10601) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/93) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000500)={{0x3, 0x100, 0x1, 0xc11, 0x2, 0x81}, 0xf6, [0x8, 0x401, 0x3f, 0x1, 0x10000, 0x3, 0x1ff, 0x5, 0x101, 0x9, 0x3, 0x3, 0x6, 0x7, 0x0, 0x5, 0x100, 0x7ff, 0x7ff, 0x0, 0x7fff, 0x7, 0x0, 0x8542, 0xa, 0xfffffff9, 0x1, 0x6, 0x82, 0x7, 0x5, 0x5, 0xff, 0x2, 0x80000001, 0x0, 0x10001, 0x0, 0x3ff, 0x2, 0x5, 0x1, 0x5, 0x1, 0x1, 0xeb9f, 0x8, 0x8001, 0x4, 0x6, 0x401, 0x8, 0x1, 0x20, 0xef, 0x0, 0x200, 0x2, 0x3, 0x8, 0xfffffffd, 0x3, 0x7, 0x56, 0x9bd6, 0x7, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x14000000, 0x7fffffff, 0x7, 0x1ff, 0x56, 0x8001, 0x400, 0x4, 0x8000, 0xfff, 0x3, 0x4, 0x3ff, 0x3, 0x1, 0x1f, 0xfff, 0x200, 0x9, 0x7, 0x3c3f, 0xfff, 0x5, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0x7, 0x4, 0x6, 0x101, 0x0, 0x7, 0x7, 0x400, 0xd1, 0x10001, 0x6, 0x1, 0x100, 0x3, 0x7, 0x4, 0x7fff, 0x2, 0x5, 0xf2, 0x113d70bb, 0x3, 0xffffffff, 0x1f, 0x20, 0x6, 0x8, 0x401, 0x6, 0x7f, 0x6, 0x3f, 0x3, 0x401, 0x5, 0x1, 0x80, 0x8, 0x10000, 0x7fff, 0x1, 0x1, 0x10000, 0x9, 0x5a7e9d0f, 0x4, 0x6, 0x8, 0x100, 0x8000, 0xfffffffc, 0x371b, 0x1, 0xd0, 0x1, 0x6, 0x200, 0x1, 0x675, 0xfffff229, 0x9, 0x2, 0x5, 0x3, 0x200, 0x30000, 0x1000, 0x4, 0xfffffeff, 0x5, 0x5, 0x100, 0x7, 0x10001, 0x1, 0x8, 0x8, 0x7fffffff, 0x8, 0x6, 0x7f, 0x5, 0x8, 0x8, 0x7fff, 0x2, 0x82b, 0x8001, 0x5, 0x5, 0x1f, 0x67, 0x20, 0x0, 0x1, 0x7, 0x101, 0x3, 0x0, 0xe69, 0x800, 0x0, 0x8, 0x1ff, 0xa4e1, 0xc92, 0x3, 0xa2e6, 0xfffffbff, 0x2, 0x0, 0x3, 0x3, 0x5, 0x0, 0x6f861b8b, 0x6, 0x80000001, 0x7217e9fb, 0x1, 0x401, 0x80, 0x7a880, 0x5, 0x0, 0x72e, 0x81, 0x40, 0x1000, 0x80000001, 0x4, 0x3, 0x1f, 0x37, 0x100, 0xce9, 0x80, 0x4, 0x80, 0x0, 0x200, 0x3, 0xfff, 0x7, 0x3f, 0x3, 0x80000001, 0x7, 0x3, 0x1ef, 0xfffffffb, 0x1, 0x2e5, 0x1, 0x101, 0x9, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x8, 0xfa7e, 0x401, 0x7, 0x0, 0x8d8, 0xbe6, 0x3, 0xec, 0x1, 0x9e, 0x6, 0x3, 0x1ff, 0xd373, 0x100, 0xe7, 0x0, 0xfffffffc, 0x1, 0x61877ea5, 0x9, 0x80000000, 0x200, 0x1, 0x0, 0x6f9, 0x2, 0x7fff, 0x5, 0x1ff, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x5, 0x4, 0xd040, 0x7fffffff, 0x7, 0x1, 0x2, 0x877a, 0x4, 0x35f, 0x9, 0x2, 0x2, 0x4, 0xffffffff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0xfffffffd, 0xd6c9, 0x5, 0x6, 0x7f, 0x20, 0x4, 0x3, 0xfffffff8, 0x401, 0x8, 0x9, 0x80000000, 0x9, 0x8000, 0x1ff, 0x2, 0x400, 0x8, 0x8000, 0x75, 0x6, 0x0, 0x3, 0x800, 0x9, 0x0, 0xdae, 0x9efc, 0x67, 0x401, 0xffffe130, 0x7, 0x0, 0x0, 0x3, 0xf768, 0x2, 0x4, 0x4, 0xd335, 0x7fffffff, 0x1, 0x0, 0x40, 0x9, 0x80000000, 0x0, 0x6, 0xffffffff, 0x200, 0x1, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x1, 0x81, 0x8, 0x8, 0x8, 0x0, 0x10000, 0x40, 0x3, 0x3, 0x3d056ec0, 0x9, 0x3, 0x1ff, 0xb5, 0x2, 0x4, 0x1ff, 0xef1d, 0x1, 0x4, 0x10001, 0x7fff, 0x1, 0x100, 0xfffffffd, 0x1, 0x9, 0x6, 0xca8f, 0xffffffff, 0x400, 0x3, 0x1e3b2463, 0x101, 0x401, 0x3f, 0x42c, 0x4, 0x10001, 0x62d, 0x0, 0x20, 0x5, 0x10000, 0x9, 0x1, 0xe123, 0x2, 0x1, 0xffff8000, 0x8, 0x3, 0x8001, 0xff, 0x3, 0x401, 0x100, 0x8000, 0x9, 0xcfc, 0xfffffffe, 0x8001, 0x4, 0xffff, 0xb9, 0x7, 0x0, 0x4, 0x1000, 0x1, 0x7ff, 0x7, 0x1, 0x0, 0xaff, 0x2, 0x8da, 0x99e, 0x0, 0x0, 0x5, 0x3, 0x20, 0x3f, 0x4, 0x3ff, 0x0, 0xeb76, 0x106, 0x1, 0x3, 0x80, 0x6, 0x9, 0x5, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x5, 0x1ff, 0x763, 0x80000000, 0xc, 0xe9, 0x3f, 0x1, 0xd7d2, 0x0, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x14, 0x2, 0x1, 0x3, 0xff, 0x80000001, 0xb7, 0x2e, 0x6, 0x61b, 0x3, 0x0, 0x3, 0x8001, 0x8, 0x5, 0xb2c, 0x101, 0x200, 0x3f, 0x7fff, 0x3, 0x2, 0x10000, 0x400, 0x2c, 0xcb5d, 0x7, 0x96c, 0x2, 0x7fff, 0x0, 0x80, 0x6, 0x5, 0x0, 0xf192, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x9, 0xd7fd, 0x4, 0x7, 0x5, 0x945, 0xfffffffc, 0x1, 0xfffff48a, 0x5, 0x5, 0xe0, 0x4, 0x3, 0x9, 0x80000000, 0x1f, 0x200, 0x0, 0xd8b, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0xffffffff, 0xffff, 0x401, 0x5, 0x4, 0x7fffffff, 0x8, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x0, 0xddd3, 0x2, 0x400000, 0x8, 0x40, 0x5d96, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x0, 0xc92, 0x100, 0x5, 0x6, 0x4, 0x9, 0x6, 0x101, 0x7, 0x7fff, 0x36e, 0x20, 0x20, 0x100, 0x200, 0xd874, 0x2, 0x20000, 0xd3, 0x8001, 0x3fc000, 0x3, 0x5, 0x40, 0x5, 0x4, 0x0, 0x9, 0x9, 0xff8, 0x7fff, 0x6, 0x1, 0x80000000, 0x8, 0x9, 0xf0, 0x200, 0x9, 0x10001, 0x0, 0x4d, 0x8000, 0xcd60, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x1f, 0x8, 0xfffffff8, 0x4, 0x6, 0x0, 0x5, 0x400, 0x4, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7f, 0xad9, 0x1, 0x7, 0x8000, 0x6, 0x2, 0x100, 0x9, 0x4, 0x1f, 0x200, 0x7, 0x2, 0x8, 0x7, 0x0, 0x8, 0x8, 0x40, 0xffffffff, 0x8, 0xfffffffc, 0x9, 0x8, 0x1, 0x8, 0xf7c, 0x9, 0x0, 0x2, 0x3, 0x10001, 0x97, 0x6, 0x9, 0x40, 0x7fff, 0xfffffff7, 0x463, 0x3, 0x2, 0x9, 0x15, 0x6, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0xe5e, 0x7f, 0x8, 0x4, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x1000, 0x7ff, 0x7, 0x3f, 0xff, 0x7, 0x4592, 0x1, 0x4, 0x2, 0x91f, 0x8, 0x4, 0x1, 0x100, 0x6cc6e587, 0xfffeffff, 0x8, 0x3f, 0x6, 0x5, 0x10001, 0x80000000, 0x4, 0x4, 0x8, 0x4, 0x8, 0x8, 0x6, 0xffff7a04, 0x9, 0xe1f, 0x0, 0x7, 0x9, 0x1ff, 0x400, 0x800, 0x3, 0x8001, 0x9, 0x4, 0x0, 0x5, 0xfff, 0x5, 0x9, 0x9, 0xf4, 0xff, 0x9, 0x83, 0x1, 0x7fffffff, 0x800, 0x401, 0xe68, 0x1a, 0x8000, 0xffff, 0x368, 0x5, 0x4, 0x3, 0x7, 0x9, 0x6d, 0x1, 0x9, 0xe2, 0x3, 0x0, 0x9, 0x0, 0x10001, 0x4a6909f, 0x1c, 0x6, 0x9, 0x560, 0x6, 0x10001, 0x1f7, 0x705, 0x5, 0x1435, 0x2, 0x6, 0x1ff, 0x20, 0xfffffff8, 0x4, 0x1, 0x100, 0xfffffffa, 0x9, 0x40, 0xfffffff9, 0x4, 0x9, 0x81, 0x6f5f, 0x81, 0xff, 0x7, 0x0, 0x4, 0x5, 0x8, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x0, 0x4, 0x3, 0x512, 0x7, 0x40, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0xffffed81, 0x7, 0x7, 0x1, 0x3, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x2, 0x2, 0x9, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4454, 0x6, 0x40dc, 0x8, 0x99ad, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5, 0xdfda, 0x0, 0x100, 0x2, 0x8, 0x37800000, 0x1, 0x1, 0x81, 0xc94c, 0x5, 0x80, 0x20, 0x7, 0x4, 0x3, 0x8, 0x711, 0x3e, 0x200, 0x6, 0x4b, 0x1f, 0x8, 0x2, 0x101, 0xd2c, 0x62fd1a7, 0x0, 0x9, 0x2, 0x1, 0x9, 0x0, 0x6ea, 0x6, 0x20, 0x8, 0xfffffff9, 0x8000, 0x20, 0x720f, 0x4, 0x4, 0x2, 0x1000, 0x5587, 0x800, 0xffff, 0xc30, 0x5, 0x7, 0x4, 0x8, 0x3c6e, 0x36000000, 0x1, 0x10, 0x800, 0x7, 0xebc7, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7, 0x7, 0x9, 0xffffffff, 0x0, 0x7f, 0x101, 0x1, 0x700, 0xf4a, 0x5, 0x3, 0x40, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x20, 0x6, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x5, 0x5, 0x6, 0x0, 0x7, 0x19, 0x9, 0x1f, 0x9, 0x800, 0x6, 0x9, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x33, 0x0, 0x80000001, 0xdd, 0xffff, 0x80000001, 0x1, 0x8, 0x2, 0x8, 0x8, 0x1, 0x1, 0x401, 0xffffffc0, 0x8, 0x8, 0xffffd848, 0x2]}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001540)={0x43, 0x9, 0x2, {0x8, 0x3, 0xffffffff, 0x4, 0x7f, 0x7f, 0x80, 0x8, 0xc642}}, 0x43) write$P9_RATTACH(r1, &(0x7f00000015c0)={0x14, 0x69, 0x2, {0x1, 0x0, 0x6}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'gretap0\x00'}) r3 = accept(r0, &(0x7f0000001640)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000016c0)=0x80) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000001740)={0x0, @l2={0x1f, 0xff13, @any, 0x81, 0x2}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3}}, @llc={0x1a, 0x10f, 0x20, 0x9, 0x15, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x27d, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000001700)='ip6gretap0\x00', 0x401, 0x3, 0x1ff}) write$P9_RREMOVE(r0, &(0x7f00000017c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001840)={0x0, @multicast1, @multicast2}, &(0x7f0000001880)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000018c0)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001900)={'tunl0\x00'}) 03:27:34 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLERROR(r0, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '%'}}, 0xa) write$P9_RREAD(r0, &(0x7f0000000040)={0x10a, 0x75, 0x1, {0xff, "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"}}, 0x10a) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x81, 0xf9, 0x1, 0x0, 0x68, 0x240, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100c0, 0xf1, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x30, 0x8, 0x0, 0x0, 0x8, 0x200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1400, 0x6, 0xffffffff, 0x3, 0x5, 0xff, 0x3ff, 0x0, 0x100, 0x0, 0x100000000}, 0x0, 0x7, r1, 0x4) write$P9_RLERROR(r0, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x841) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x39, 0x10601) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/93) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000500)={{0x3, 0x100, 0x1, 0xc11, 0x2, 0x81}, 0xf6, [0x8, 0x401, 0x3f, 0x1, 0x10000, 0x3, 0x1ff, 0x5, 0x101, 0x9, 0x3, 0x3, 0x6, 0x7, 0x0, 0x5, 0x100, 0x7ff, 0x7ff, 0x0, 0x7fff, 0x7, 0x0, 0x8542, 0xa, 0xfffffff9, 0x1, 0x6, 0x82, 0x7, 0x5, 0x5, 0xff, 0x2, 0x80000001, 0x0, 0x10001, 0x0, 0x3ff, 0x2, 0x5, 0x1, 0x5, 0x1, 0x1, 0xeb9f, 0x8, 0x8001, 0x4, 0x6, 0x401, 0x8, 0x1, 0x20, 0xef, 0x0, 0x200, 0x2, 0x3, 0x8, 0xfffffffd, 0x3, 0x7, 0x56, 0x9bd6, 0x7, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x14000000, 0x7fffffff, 0x7, 0x1ff, 0x56, 0x8001, 0x400, 0x4, 0x8000, 0xfff, 0x3, 0x4, 0x3ff, 0x3, 0x1, 0x1f, 0xfff, 0x200, 0x9, 0x7, 0x3c3f, 0xfff, 0x5, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0x7, 0x4, 0x6, 0x101, 0x0, 0x7, 0x7, 0x400, 0xd1, 0x10001, 0x6, 0x1, 0x100, 0x3, 0x7, 0x4, 0x7fff, 0x2, 0x5, 0xf2, 0x113d70bb, 0x3, 0xffffffff, 0x1f, 0x20, 0x6, 0x8, 0x401, 0x6, 0x7f, 0x6, 0x3f, 0x3, 0x401, 0x5, 0x1, 0x80, 0x8, 0x10000, 0x7fff, 0x1, 0x1, 0x10000, 0x9, 0x5a7e9d0f, 0x4, 0x6, 0x8, 0x100, 0x8000, 0xfffffffc, 0x371b, 0x1, 0xd0, 0x1, 0x6, 0x200, 0x1, 0x675, 0xfffff229, 0x9, 0x2, 0x5, 0x3, 0x200, 0x30000, 0x1000, 0x4, 0xfffffeff, 0x5, 0x5, 0x100, 0x7, 0x10001, 0x1, 0x8, 0x8, 0x7fffffff, 0x8, 0x6, 0x7f, 0x5, 0x8, 0x8, 0x7fff, 0x2, 0x82b, 0x8001, 0x5, 0x5, 0x1f, 0x67, 0x20, 0x0, 0x1, 0x7, 0x101, 0x3, 0x0, 0xe69, 0x800, 0x0, 0x8, 0x1ff, 0xa4e1, 0xc92, 0x3, 0xa2e6, 0xfffffbff, 0x2, 0x0, 0x3, 0x3, 0x5, 0x0, 0x6f861b8b, 0x6, 0x80000001, 0x7217e9fb, 0x1, 0x401, 0x80, 0x7a880, 0x5, 0x0, 0x72e, 0x81, 0x40, 0x1000, 0x80000001, 0x4, 0x3, 0x1f, 0x37, 0x100, 0xce9, 0x80, 0x4, 0x80, 0x0, 0x200, 0x3, 0xfff, 0x7, 0x3f, 0x3, 0x80000001, 0x7, 0x3, 0x1ef, 0xfffffffb, 0x1, 0x2e5, 0x1, 0x101, 0x9, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x8, 0xfa7e, 0x401, 0x7, 0x0, 0x8d8, 0xbe6, 0x3, 0xec, 0x1, 0x9e, 0x6, 0x3, 0x1ff, 0xd373, 0x100, 0xe7, 0x0, 0xfffffffc, 0x1, 0x61877ea5, 0x9, 0x80000000, 0x200, 0x1, 0x0, 0x6f9, 0x2, 0x7fff, 0x5, 0x1ff, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x5, 0x4, 0xd040, 0x7fffffff, 0x7, 0x1, 0x2, 0x877a, 0x4, 0x35f, 0x9, 0x2, 0x2, 0x4, 0xffffffff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0xfffffffd, 0xd6c9, 0x5, 0x6, 0x7f, 0x20, 0x4, 0x3, 0xfffffff8, 0x401, 0x8, 0x9, 0x80000000, 0x9, 0x8000, 0x1ff, 0x2, 0x400, 0x8, 0x8000, 0x75, 0x6, 0x0, 0x3, 0x800, 0x9, 0x0, 0xdae, 0x9efc, 0x67, 0x401, 0xffffe130, 0x7, 0x0, 0x0, 0x3, 0xf768, 0x2, 0x4, 0x4, 0xd335, 0x7fffffff, 0x1, 0x0, 0x40, 0x9, 0x80000000, 0x0, 0x6, 0xffffffff, 0x200, 0x1, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x1, 0x81, 0x8, 0x8, 0x8, 0x0, 0x10000, 0x40, 0x3, 0x3, 0x3d056ec0, 0x9, 0x3, 0x1ff, 0xb5, 0x2, 0x4, 0x1ff, 0xef1d, 0x1, 0x4, 0x10001, 0x7fff, 0x1, 0x100, 0xfffffffd, 0x1, 0x9, 0x6, 0xca8f, 0xffffffff, 0x400, 0x3, 0x1e3b2463, 0x101, 0x401, 0x3f, 0x42c, 0x4, 0x10001, 0x62d, 0x0, 0x20, 0x5, 0x10000, 0x9, 0x1, 0xe123, 0x2, 0x1, 0xffff8000, 0x8, 0x3, 0x8001, 0xff, 0x3, 0x401, 0x100, 0x8000, 0x9, 0xcfc, 0xfffffffe, 0x8001, 0x4, 0xffff, 0xb9, 0x7, 0x0, 0x4, 0x1000, 0x1, 0x7ff, 0x7, 0x1, 0x0, 0xaff, 0x2, 0x8da, 0x99e, 0x0, 0x0, 0x5, 0x3, 0x20, 0x3f, 0x4, 0x3ff, 0x0, 0xeb76, 0x106, 0x1, 0x3, 0x80, 0x6, 0x9, 0x5, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x5, 0x1ff, 0x763, 0x80000000, 0xc, 0xe9, 0x3f, 0x1, 0xd7d2, 0x0, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x14, 0x2, 0x1, 0x3, 0xff, 0x80000001, 0xb7, 0x2e, 0x6, 0x61b, 0x3, 0x0, 0x3, 0x8001, 0x8, 0x5, 0xb2c, 0x101, 0x200, 0x3f, 0x7fff, 0x3, 0x2, 0x10000, 0x400, 0x2c, 0xcb5d, 0x7, 0x96c, 0x2, 0x7fff, 0x0, 0x80, 0x6, 0x5, 0x0, 0xf192, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x9, 0xd7fd, 0x4, 0x7, 0x5, 0x945, 0xfffffffc, 0x1, 0xfffff48a, 0x5, 0x5, 0xe0, 0x4, 0x3, 0x9, 0x80000000, 0x1f, 0x200, 0x0, 0xd8b, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0xffffffff, 0xffff, 0x401, 0x5, 0x4, 0x7fffffff, 0x8, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x0, 0xddd3, 0x2, 0x400000, 0x8, 0x40, 0x5d96, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x0, 0xc92, 0x100, 0x5, 0x6, 0x4, 0x9, 0x6, 0x101, 0x7, 0x7fff, 0x36e, 0x20, 0x20, 0x100, 0x200, 0xd874, 0x2, 0x20000, 0xd3, 0x8001, 0x3fc000, 0x3, 0x5, 0x40, 0x5, 0x4, 0x0, 0x9, 0x9, 0xff8, 0x7fff, 0x6, 0x1, 0x80000000, 0x8, 0x9, 0xf0, 0x200, 0x9, 0x10001, 0x0, 0x4d, 0x8000, 0xcd60, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x1f, 0x8, 0xfffffff8, 0x4, 0x6, 0x0, 0x5, 0x400, 0x4, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7f, 0xad9, 0x1, 0x7, 0x8000, 0x6, 0x2, 0x100, 0x9, 0x4, 0x1f, 0x200, 0x7, 0x2, 0x8, 0x7, 0x0, 0x8, 0x8, 0x40, 0xffffffff, 0x8, 0xfffffffc, 0x9, 0x8, 0x1, 0x8, 0xf7c, 0x9, 0x0, 0x2, 0x3, 0x10001, 0x97, 0x6, 0x9, 0x40, 0x7fff, 0xfffffff7, 0x463, 0x3, 0x2, 0x9, 0x15, 0x6, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0xe5e, 0x7f, 0x8, 0x4, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x1000, 0x7ff, 0x7, 0x3f, 0xff, 0x7, 0x4592, 0x1, 0x4, 0x2, 0x91f, 0x8, 0x4, 0x1, 0x100, 0x6cc6e587, 0xfffeffff, 0x8, 0x3f, 0x6, 0x5, 0x10001, 0x80000000, 0x4, 0x4, 0x8, 0x4, 0x8, 0x8, 0x6, 0xffff7a04, 0x9, 0xe1f, 0x0, 0x7, 0x9, 0x1ff, 0x400, 0x800, 0x3, 0x8001, 0x9, 0x4, 0x0, 0x5, 0xfff, 0x5, 0x9, 0x9, 0xf4, 0xff, 0x9, 0x83, 0x1, 0x7fffffff, 0x800, 0x401, 0xe68, 0x1a, 0x8000, 0xffff, 0x368, 0x5, 0x4, 0x3, 0x7, 0x9, 0x6d, 0x1, 0x9, 0xe2, 0x3, 0x0, 0x9, 0x0, 0x10001, 0x4a6909f, 0x1c, 0x6, 0x9, 0x560, 0x6, 0x10001, 0x1f7, 0x705, 0x5, 0x1435, 0x2, 0x6, 0x1ff, 0x20, 0xfffffff8, 0x4, 0x1, 0x100, 0xfffffffa, 0x9, 0x40, 0xfffffff9, 0x4, 0x9, 0x81, 0x6f5f, 0x81, 0xff, 0x7, 0x0, 0x4, 0x5, 0x8, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x0, 0x4, 0x3, 0x512, 0x7, 0x40, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0xffffed81, 0x7, 0x7, 0x1, 0x3, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x2, 0x2, 0x9, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4454, 0x6, 0x40dc, 0x8, 0x99ad, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5, 0xdfda, 0x0, 0x100, 0x2, 0x8, 0x37800000, 0x1, 0x1, 0x81, 0xc94c, 0x5, 0x80, 0x20, 0x7, 0x4, 0x3, 0x8, 0x711, 0x3e, 0x200, 0x6, 0x4b, 0x1f, 0x8, 0x2, 0x101, 0xd2c, 0x62fd1a7, 0x0, 0x9, 0x2, 0x1, 0x9, 0x0, 0x6ea, 0x6, 0x20, 0x8, 0xfffffff9, 0x8000, 0x20, 0x720f, 0x4, 0x4, 0x2, 0x1000, 0x5587, 0x800, 0xffff, 0xc30, 0x5, 0x7, 0x4, 0x8, 0x3c6e, 0x36000000, 0x1, 0x10, 0x800, 0x7, 0xebc7, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7, 0x7, 0x9, 0xffffffff, 0x0, 0x7f, 0x101, 0x1, 0x700, 0xf4a, 0x5, 0x3, 0x40, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x20, 0x6, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x5, 0x5, 0x6, 0x0, 0x7, 0x19, 0x9, 0x1f, 0x9, 0x800, 0x6, 0x9, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x33, 0x0, 0x80000001, 0xdd, 0xffff, 0x80000001, 0x1, 0x8, 0x2, 0x8, 0x8, 0x1, 0x1, 0x401, 0xffffffc0, 0x8, 0x8, 0xffffd848, 0x2]}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001540)={0x43, 0x9, 0x2, {0x8, 0x3, 0xffffffff, 0x4, 0x7f, 0x7f, 0x80, 0x8, 0xc642}}, 0x43) write$P9_RATTACH(r1, &(0x7f00000015c0)={0x14, 0x69, 0x2, {0x1, 0x0, 0x6}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'gretap0\x00'}) r3 = accept(r0, &(0x7f0000001640)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000016c0)=0x80) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000001740)={0x0, @l2={0x1f, 0xff13, @any, 0x81, 0x2}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3}}, @llc={0x1a, 0x10f, 0x20, 0x9, 0x15, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x27d, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000001700)='ip6gretap0\x00', 0x401, 0x3, 0x1ff}) write$P9_RREMOVE(r0, &(0x7f00000017c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001840)={0x0, @multicast1, @multicast2}, &(0x7f0000001880)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000018c0)={'batadv_slave_1\x00'}) 03:27:34 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLERROR(r0, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '%'}}, 0xa) write$P9_RREAD(r0, &(0x7f0000000040)={0x10a, 0x75, 0x1, {0xff, "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"}}, 0x10a) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x81, 0xf9, 0x1, 0x0, 0x68, 0x240, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100c0, 0xf1, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x30, 0x8, 0x0, 0x0, 0x8, 0x200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1400, 0x6, 0xffffffff, 0x3, 0x5, 0xff, 0x3ff, 0x0, 0x100, 0x0, 0x100000000}, 0x0, 0x7, r1, 0x4) write$P9_RLERROR(r0, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x841) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x39, 0x10601) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/93) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000500)={{0x3, 0x100, 0x1, 0xc11, 0x2, 0x81}, 0xf6, [0x8, 0x401, 0x3f, 0x1, 0x10000, 0x3, 0x1ff, 0x5, 0x101, 0x9, 0x3, 0x3, 0x6, 0x7, 0x0, 0x5, 0x100, 0x7ff, 0x7ff, 0x0, 0x7fff, 0x7, 0x0, 0x8542, 0xa, 0xfffffff9, 0x1, 0x6, 0x82, 0x7, 0x5, 0x5, 0xff, 0x2, 0x80000001, 0x0, 0x10001, 0x0, 0x3ff, 0x2, 0x5, 0x1, 0x5, 0x1, 0x1, 0xeb9f, 0x8, 0x8001, 0x4, 0x6, 0x401, 0x8, 0x1, 0x20, 0xef, 0x0, 0x200, 0x2, 0x3, 0x8, 0xfffffffd, 0x3, 0x7, 0x56, 0x9bd6, 0x7, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x14000000, 0x7fffffff, 0x7, 0x1ff, 0x56, 0x8001, 0x400, 0x4, 0x8000, 0xfff, 0x3, 0x4, 0x3ff, 0x3, 0x1, 0x1f, 0xfff, 0x200, 0x9, 0x7, 0x3c3f, 0xfff, 0x5, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0x7, 0x4, 0x6, 0x101, 0x0, 0x7, 0x7, 0x400, 0xd1, 0x10001, 0x6, 0x1, 0x100, 0x3, 0x7, 0x4, 0x7fff, 0x2, 0x5, 0xf2, 0x113d70bb, 0x3, 0xffffffff, 0x1f, 0x20, 0x6, 0x8, 0x401, 0x6, 0x7f, 0x6, 0x3f, 0x3, 0x401, 0x5, 0x1, 0x80, 0x8, 0x10000, 0x7fff, 0x1, 0x1, 0x10000, 0x9, 0x5a7e9d0f, 0x4, 0x6, 0x8, 0x100, 0x8000, 0xfffffffc, 0x371b, 0x1, 0xd0, 0x1, 0x6, 0x200, 0x1, 0x675, 0xfffff229, 0x9, 0x2, 0x5, 0x3, 0x200, 0x30000, 0x1000, 0x4, 0xfffffeff, 0x5, 0x5, 0x100, 0x7, 0x10001, 0x1, 0x8, 0x8, 0x7fffffff, 0x8, 0x6, 0x7f, 0x5, 0x8, 0x8, 0x7fff, 0x2, 0x82b, 0x8001, 0x5, 0x5, 0x1f, 0x67, 0x20, 0x0, 0x1, 0x7, 0x101, 0x3, 0x0, 0xe69, 0x800, 0x0, 0x8, 0x1ff, 0xa4e1, 0xc92, 0x3, 0xa2e6, 0xfffffbff, 0x2, 0x0, 0x3, 0x3, 0x5, 0x0, 0x6f861b8b, 0x6, 0x80000001, 0x7217e9fb, 0x1, 0x401, 0x80, 0x7a880, 0x5, 0x0, 0x72e, 0x81, 0x40, 0x1000, 0x80000001, 0x4, 0x3, 0x1f, 0x37, 0x100, 0xce9, 0x80, 0x4, 0x80, 0x0, 0x200, 0x3, 0xfff, 0x7, 0x3f, 0x3, 0x80000001, 0x7, 0x3, 0x1ef, 0xfffffffb, 0x1, 0x2e5, 0x1, 0x101, 0x9, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x8, 0xfa7e, 0x401, 0x7, 0x0, 0x8d8, 0xbe6, 0x3, 0xec, 0x1, 0x9e, 0x6, 0x3, 0x1ff, 0xd373, 0x100, 0xe7, 0x0, 0xfffffffc, 0x1, 0x61877ea5, 0x9, 0x80000000, 0x200, 0x1, 0x0, 0x6f9, 0x2, 0x7fff, 0x5, 0x1ff, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x5, 0x4, 0xd040, 0x7fffffff, 0x7, 0x1, 0x2, 0x877a, 0x4, 0x35f, 0x9, 0x2, 0x2, 0x4, 0xffffffff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0xfffffffd, 0xd6c9, 0x5, 0x6, 0x7f, 0x20, 0x4, 0x3, 0xfffffff8, 0x401, 0x8, 0x9, 0x80000000, 0x9, 0x8000, 0x1ff, 0x2, 0x400, 0x8, 0x8000, 0x75, 0x6, 0x0, 0x3, 0x800, 0x9, 0x0, 0xdae, 0x9efc, 0x67, 0x401, 0xffffe130, 0x7, 0x0, 0x0, 0x3, 0xf768, 0x2, 0x4, 0x4, 0xd335, 0x7fffffff, 0x1, 0x0, 0x40, 0x9, 0x80000000, 0x0, 0x6, 0xffffffff, 0x200, 0x1, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x1, 0x81, 0x8, 0x8, 0x8, 0x0, 0x10000, 0x40, 0x3, 0x3, 0x3d056ec0, 0x9, 0x3, 0x1ff, 0xb5, 0x2, 0x4, 0x1ff, 0xef1d, 0x1, 0x4, 0x10001, 0x7fff, 0x1, 0x100, 0xfffffffd, 0x1, 0x9, 0x6, 0xca8f, 0xffffffff, 0x400, 0x3, 0x1e3b2463, 0x101, 0x401, 0x3f, 0x42c, 0x4, 0x10001, 0x62d, 0x0, 0x20, 0x5, 0x10000, 0x9, 0x1, 0xe123, 0x2, 0x1, 0xffff8000, 0x8, 0x3, 0x8001, 0xff, 0x3, 0x401, 0x100, 0x8000, 0x9, 0xcfc, 0xfffffffe, 0x8001, 0x4, 0xffff, 0xb9, 0x7, 0x0, 0x4, 0x1000, 0x1, 0x7ff, 0x7, 0x1, 0x0, 0xaff, 0x2, 0x8da, 0x99e, 0x0, 0x0, 0x5, 0x3, 0x20, 0x3f, 0x4, 0x3ff, 0x0, 0xeb76, 0x106, 0x1, 0x3, 0x80, 0x6, 0x9, 0x5, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x5, 0x1ff, 0x763, 0x80000000, 0xc, 0xe9, 0x3f, 0x1, 0xd7d2, 0x0, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x14, 0x2, 0x1, 0x3, 0xff, 0x80000001, 0xb7, 0x2e, 0x6, 0x61b, 0x3, 0x0, 0x3, 0x8001, 0x8, 0x5, 0xb2c, 0x101, 0x200, 0x3f, 0x7fff, 0x3, 0x2, 0x10000, 0x400, 0x2c, 0xcb5d, 0x7, 0x96c, 0x2, 0x7fff, 0x0, 0x80, 0x6, 0x5, 0x0, 0xf192, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x9, 0xd7fd, 0x4, 0x7, 0x5, 0x945, 0xfffffffc, 0x1, 0xfffff48a, 0x5, 0x5, 0xe0, 0x4, 0x3, 0x9, 0x80000000, 0x1f, 0x200, 0x0, 0xd8b, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0xffffffff, 0xffff, 0x401, 0x5, 0x4, 0x7fffffff, 0x8, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x0, 0xddd3, 0x2, 0x400000, 0x8, 0x40, 0x5d96, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x0, 0xc92, 0x100, 0x5, 0x6, 0x4, 0x9, 0x6, 0x101, 0x7, 0x7fff, 0x36e, 0x20, 0x20, 0x100, 0x200, 0xd874, 0x2, 0x20000, 0xd3, 0x8001, 0x3fc000, 0x3, 0x5, 0x40, 0x5, 0x4, 0x0, 0x9, 0x9, 0xff8, 0x7fff, 0x6, 0x1, 0x80000000, 0x8, 0x9, 0xf0, 0x200, 0x9, 0x10001, 0x0, 0x4d, 0x8000, 0xcd60, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x1f, 0x8, 0xfffffff8, 0x4, 0x6, 0x0, 0x5, 0x400, 0x4, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7f, 0xad9, 0x1, 0x7, 0x8000, 0x6, 0x2, 0x100, 0x9, 0x4, 0x1f, 0x200, 0x7, 0x2, 0x8, 0x7, 0x0, 0x8, 0x8, 0x40, 0xffffffff, 0x8, 0xfffffffc, 0x9, 0x8, 0x1, 0x8, 0xf7c, 0x9, 0x0, 0x2, 0x3, 0x10001, 0x97, 0x6, 0x9, 0x40, 0x7fff, 0xfffffff7, 0x463, 0x3, 0x2, 0x9, 0x15, 0x6, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0xe5e, 0x7f, 0x8, 0x4, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x1000, 0x7ff, 0x7, 0x3f, 0xff, 0x7, 0x4592, 0x1, 0x4, 0x2, 0x91f, 0x8, 0x4, 0x1, 0x100, 0x6cc6e587, 0xfffeffff, 0x8, 0x3f, 0x6, 0x5, 0x10001, 0x80000000, 0x4, 0x4, 0x8, 0x4, 0x8, 0x8, 0x6, 0xffff7a04, 0x9, 0xe1f, 0x0, 0x7, 0x9, 0x1ff, 0x400, 0x800, 0x3, 0x8001, 0x9, 0x4, 0x0, 0x5, 0xfff, 0x5, 0x9, 0x9, 0xf4, 0xff, 0x9, 0x83, 0x1, 0x7fffffff, 0x800, 0x401, 0xe68, 0x1a, 0x8000, 0xffff, 0x368, 0x5, 0x4, 0x3, 0x7, 0x9, 0x6d, 0x1, 0x9, 0xe2, 0x3, 0x0, 0x9, 0x0, 0x10001, 0x4a6909f, 0x1c, 0x6, 0x9, 0x560, 0x6, 0x10001, 0x1f7, 0x705, 0x5, 0x1435, 0x2, 0x6, 0x1ff, 0x20, 0xfffffff8, 0x4, 0x1, 0x100, 0xfffffffa, 0x9, 0x40, 0xfffffff9, 0x4, 0x9, 0x81, 0x6f5f, 0x81, 0xff, 0x7, 0x0, 0x4, 0x5, 0x8, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x0, 0x4, 0x3, 0x512, 0x7, 0x40, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0xffffed81, 0x7, 0x7, 0x1, 0x3, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x2, 0x2, 0x9, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4454, 0x6, 0x40dc, 0x8, 0x99ad, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5, 0xdfda, 0x0, 0x100, 0x2, 0x8, 0x37800000, 0x1, 0x1, 0x81, 0xc94c, 0x5, 0x80, 0x20, 0x7, 0x4, 0x3, 0x8, 0x711, 0x3e, 0x200, 0x6, 0x4b, 0x1f, 0x8, 0x2, 0x101, 0xd2c, 0x62fd1a7, 0x0, 0x9, 0x2, 0x1, 0x9, 0x0, 0x6ea, 0x6, 0x20, 0x8, 0xfffffff9, 0x8000, 0x20, 0x720f, 0x4, 0x4, 0x2, 0x1000, 0x5587, 0x800, 0xffff, 0xc30, 0x5, 0x7, 0x4, 0x8, 0x3c6e, 0x36000000, 0x1, 0x10, 0x800, 0x7, 0xebc7, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7, 0x7, 0x9, 0xffffffff, 0x0, 0x7f, 0x101, 0x1, 0x700, 0xf4a, 0x5, 0x3, 0x40, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x20, 0x6, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x5, 0x5, 0x6, 0x0, 0x7, 0x19, 0x9, 0x1f, 0x9, 0x800, 0x6, 0x9, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x33, 0x0, 0x80000001, 0xdd, 0xffff, 0x80000001, 0x1, 0x8, 0x2, 0x8, 0x8, 0x1, 0x1, 0x401, 0xffffffc0, 0x8, 0x8, 0xffffd848, 0x2]}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001540)={0x43, 0x9, 0x2, {0x8, 0x3, 0xffffffff, 0x4, 0x7f, 0x7f, 0x80, 0x8, 0xc642}}, 0x43) write$P9_RATTACH(r1, &(0x7f00000015c0)={0x14, 0x69, 0x2, {0x1, 0x0, 0x6}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'gretap0\x00'}) r3 = accept(r0, &(0x7f0000001640)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000016c0)=0x80) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000001740)={0x0, @l2={0x1f, 0xff13, @any, 0x81, 0x2}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3}}, @llc={0x1a, 0x10f, 0x20, 0x9, 0x15, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x27d, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000001700)='ip6gretap0\x00', 0x401, 0x3, 0x1ff}) write$P9_RREMOVE(r0, &(0x7f00000017c0)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001840)={0x0, @multicast1, @multicast2}, &(0x7f0000001880)=0xc) 03:27:35 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLERROR(r0, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '%'}}, 0xa) write$P9_RREAD(r0, &(0x7f0000000040)={0x10a, 0x75, 0x1, {0xff, "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"}}, 0x10a) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x81, 0xf9, 0x1, 0x0, 0x68, 0x240, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100c0, 0xf1, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x30, 0x8, 0x0, 0x0, 0x8, 0x200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1400, 0x6, 0xffffffff, 0x3, 0x5, 0xff, 0x3ff, 0x0, 0x100, 0x0, 0x100000000}, 0x0, 0x7, r1, 0x4) write$P9_RLERROR(r0, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x841) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x39, 0x10601) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/93) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000500)={{0x3, 0x100, 0x1, 0xc11, 0x2, 0x81}, 0xf6, [0x8, 0x401, 0x3f, 0x1, 0x10000, 0x3, 0x1ff, 0x5, 0x101, 0x9, 0x3, 0x3, 0x6, 0x7, 0x0, 0x5, 0x100, 0x7ff, 0x7ff, 0x0, 0x7fff, 0x7, 0x0, 0x8542, 0xa, 0xfffffff9, 0x1, 0x6, 0x82, 0x7, 0x5, 0x5, 0xff, 0x2, 0x80000001, 0x0, 0x10001, 0x0, 0x3ff, 0x2, 0x5, 0x1, 0x5, 0x1, 0x1, 0xeb9f, 0x8, 0x8001, 0x4, 0x6, 0x401, 0x8, 0x1, 0x20, 0xef, 0x0, 0x200, 0x2, 0x3, 0x8, 0xfffffffd, 0x3, 0x7, 0x56, 0x9bd6, 0x7, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x14000000, 0x7fffffff, 0x7, 0x1ff, 0x56, 0x8001, 0x400, 0x4, 0x8000, 0xfff, 0x3, 0x4, 0x3ff, 0x3, 0x1, 0x1f, 0xfff, 0x200, 0x9, 0x7, 0x3c3f, 0xfff, 0x5, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0x7, 0x4, 0x6, 0x101, 0x0, 0x7, 0x7, 0x400, 0xd1, 0x10001, 0x6, 0x1, 0x100, 0x3, 0x7, 0x4, 0x7fff, 0x2, 0x5, 0xf2, 0x113d70bb, 0x3, 0xffffffff, 0x1f, 0x20, 0x6, 0x8, 0x401, 0x6, 0x7f, 0x6, 0x3f, 0x3, 0x401, 0x5, 0x1, 0x80, 0x8, 0x10000, 0x7fff, 0x1, 0x1, 0x10000, 0x9, 0x5a7e9d0f, 0x4, 0x6, 0x8, 0x100, 0x8000, 0xfffffffc, 0x371b, 0x1, 0xd0, 0x1, 0x6, 0x200, 0x1, 0x675, 0xfffff229, 0x9, 0x2, 0x5, 0x3, 0x200, 0x30000, 0x1000, 0x4, 0xfffffeff, 0x5, 0x5, 0x100, 0x7, 0x10001, 0x1, 0x8, 0x8, 0x7fffffff, 0x8, 0x6, 0x7f, 0x5, 0x8, 0x8, 0x7fff, 0x2, 0x82b, 0x8001, 0x5, 0x5, 0x1f, 0x67, 0x20, 0x0, 0x1, 0x7, 0x101, 0x3, 0x0, 0xe69, 0x800, 0x0, 0x8, 0x1ff, 0xa4e1, 0xc92, 0x3, 0xa2e6, 0xfffffbff, 0x2, 0x0, 0x3, 0x3, 0x5, 0x0, 0x6f861b8b, 0x6, 0x80000001, 0x7217e9fb, 0x1, 0x401, 0x80, 0x7a880, 0x5, 0x0, 0x72e, 0x81, 0x40, 0x1000, 0x80000001, 0x4, 0x3, 0x1f, 0x37, 0x100, 0xce9, 0x80, 0x4, 0x80, 0x0, 0x200, 0x3, 0xfff, 0x7, 0x3f, 0x3, 0x80000001, 0x7, 0x3, 0x1ef, 0xfffffffb, 0x1, 0x2e5, 0x1, 0x101, 0x9, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x8, 0xfa7e, 0x401, 0x7, 0x0, 0x8d8, 0xbe6, 0x3, 0xec, 0x1, 0x9e, 0x6, 0x3, 0x1ff, 0xd373, 0x100, 0xe7, 0x0, 0xfffffffc, 0x1, 0x61877ea5, 0x9, 0x80000000, 0x200, 0x1, 0x0, 0x6f9, 0x2, 0x7fff, 0x5, 0x1ff, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x5, 0x4, 0xd040, 0x7fffffff, 0x7, 0x1, 0x2, 0x877a, 0x4, 0x35f, 0x9, 0x2, 0x2, 0x4, 0xffffffff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0xfffffffd, 0xd6c9, 0x5, 0x6, 0x7f, 0x20, 0x4, 0x3, 0xfffffff8, 0x401, 0x8, 0x9, 0x80000000, 0x9, 0x8000, 0x1ff, 0x2, 0x400, 0x8, 0x8000, 0x75, 0x6, 0x0, 0x3, 0x800, 0x9, 0x0, 0xdae, 0x9efc, 0x67, 0x401, 0xffffe130, 0x7, 0x0, 0x0, 0x3, 0xf768, 0x2, 0x4, 0x4, 0xd335, 0x7fffffff, 0x1, 0x0, 0x40, 0x9, 0x80000000, 0x0, 0x6, 0xffffffff, 0x200, 0x1, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x1, 0x81, 0x8, 0x8, 0x8, 0x0, 0x10000, 0x40, 0x3, 0x3, 0x3d056ec0, 0x9, 0x3, 0x1ff, 0xb5, 0x2, 0x4, 0x1ff, 0xef1d, 0x1, 0x4, 0x10001, 0x7fff, 0x1, 0x100, 0xfffffffd, 0x1, 0x9, 0x6, 0xca8f, 0xffffffff, 0x400, 0x3, 0x1e3b2463, 0x101, 0x401, 0x3f, 0x42c, 0x4, 0x10001, 0x62d, 0x0, 0x20, 0x5, 0x10000, 0x9, 0x1, 0xe123, 0x2, 0x1, 0xffff8000, 0x8, 0x3, 0x8001, 0xff, 0x3, 0x401, 0x100, 0x8000, 0x9, 0xcfc, 0xfffffffe, 0x8001, 0x4, 0xffff, 0xb9, 0x7, 0x0, 0x4, 0x1000, 0x1, 0x7ff, 0x7, 0x1, 0x0, 0xaff, 0x2, 0x8da, 0x99e, 0x0, 0x0, 0x5, 0x3, 0x20, 0x3f, 0x4, 0x3ff, 0x0, 0xeb76, 0x106, 0x1, 0x3, 0x80, 0x6, 0x9, 0x5, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x5, 0x1ff, 0x763, 0x80000000, 0xc, 0xe9, 0x3f, 0x1, 0xd7d2, 0x0, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x14, 0x2, 0x1, 0x3, 0xff, 0x80000001, 0xb7, 0x2e, 0x6, 0x61b, 0x3, 0x0, 0x3, 0x8001, 0x8, 0x5, 0xb2c, 0x101, 0x200, 0x3f, 0x7fff, 0x3, 0x2, 0x10000, 0x400, 0x2c, 0xcb5d, 0x7, 0x96c, 0x2, 0x7fff, 0x0, 0x80, 0x6, 0x5, 0x0, 0xf192, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x9, 0xd7fd, 0x4, 0x7, 0x5, 0x945, 0xfffffffc, 0x1, 0xfffff48a, 0x5, 0x5, 0xe0, 0x4, 0x3, 0x9, 0x80000000, 0x1f, 0x200, 0x0, 0xd8b, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0xffffffff, 0xffff, 0x401, 0x5, 0x4, 0x7fffffff, 0x8, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x0, 0xddd3, 0x2, 0x400000, 0x8, 0x40, 0x5d96, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x0, 0xc92, 0x100, 0x5, 0x6, 0x4, 0x9, 0x6, 0x101, 0x7, 0x7fff, 0x36e, 0x20, 0x20, 0x100, 0x200, 0xd874, 0x2, 0x20000, 0xd3, 0x8001, 0x3fc000, 0x3, 0x5, 0x40, 0x5, 0x4, 0x0, 0x9, 0x9, 0xff8, 0x7fff, 0x6, 0x1, 0x80000000, 0x8, 0x9, 0xf0, 0x200, 0x9, 0x10001, 0x0, 0x4d, 0x8000, 0xcd60, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x1f, 0x8, 0xfffffff8, 0x4, 0x6, 0x0, 0x5, 0x400, 0x4, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7f, 0xad9, 0x1, 0x7, 0x8000, 0x6, 0x2, 0x100, 0x9, 0x4, 0x1f, 0x200, 0x7, 0x2, 0x8, 0x7, 0x0, 0x8, 0x8, 0x40, 0xffffffff, 0x8, 0xfffffffc, 0x9, 0x8, 0x1, 0x8, 0xf7c, 0x9, 0x0, 0x2, 0x3, 0x10001, 0x97, 0x6, 0x9, 0x40, 0x7fff, 0xfffffff7, 0x463, 0x3, 0x2, 0x9, 0x15, 0x6, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0xe5e, 0x7f, 0x8, 0x4, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x1000, 0x7ff, 0x7, 0x3f, 0xff, 0x7, 0x4592, 0x1, 0x4, 0x2, 0x91f, 0x8, 0x4, 0x1, 0x100, 0x6cc6e587, 0xfffeffff, 0x8, 0x3f, 0x6, 0x5, 0x10001, 0x80000000, 0x4, 0x4, 0x8, 0x4, 0x8, 0x8, 0x6, 0xffff7a04, 0x9, 0xe1f, 0x0, 0x7, 0x9, 0x1ff, 0x400, 0x800, 0x3, 0x8001, 0x9, 0x4, 0x0, 0x5, 0xfff, 0x5, 0x9, 0x9, 0xf4, 0xff, 0x9, 0x83, 0x1, 0x7fffffff, 0x800, 0x401, 0xe68, 0x1a, 0x8000, 0xffff, 0x368, 0x5, 0x4, 0x3, 0x7, 0x9, 0x6d, 0x1, 0x9, 0xe2, 0x3, 0x0, 0x9, 0x0, 0x10001, 0x4a6909f, 0x1c, 0x6, 0x9, 0x560, 0x6, 0x10001, 0x1f7, 0x705, 0x5, 0x1435, 0x2, 0x6, 0x1ff, 0x20, 0xfffffff8, 0x4, 0x1, 0x100, 0xfffffffa, 0x9, 0x40, 0xfffffff9, 0x4, 0x9, 0x81, 0x6f5f, 0x81, 0xff, 0x7, 0x0, 0x4, 0x5, 0x8, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x0, 0x4, 0x3, 0x512, 0x7, 0x40, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0xffffed81, 0x7, 0x7, 0x1, 0x3, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x2, 0x2, 0x9, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4454, 0x6, 0x40dc, 0x8, 0x99ad, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5, 0xdfda, 0x0, 0x100, 0x2, 0x8, 0x37800000, 0x1, 0x1, 0x81, 0xc94c, 0x5, 0x80, 0x20, 0x7, 0x4, 0x3, 0x8, 0x711, 0x3e, 0x200, 0x6, 0x4b, 0x1f, 0x8, 0x2, 0x101, 0xd2c, 0x62fd1a7, 0x0, 0x9, 0x2, 0x1, 0x9, 0x0, 0x6ea, 0x6, 0x20, 0x8, 0xfffffff9, 0x8000, 0x20, 0x720f, 0x4, 0x4, 0x2, 0x1000, 0x5587, 0x800, 0xffff, 0xc30, 0x5, 0x7, 0x4, 0x8, 0x3c6e, 0x36000000, 0x1, 0x10, 0x800, 0x7, 0xebc7, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7, 0x7, 0x9, 0xffffffff, 0x0, 0x7f, 0x101, 0x1, 0x700, 0xf4a, 0x5, 0x3, 0x40, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x20, 0x6, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x5, 0x5, 0x6, 0x0, 0x7, 0x19, 0x9, 0x1f, 0x9, 0x800, 0x6, 0x9, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x33, 0x0, 0x80000001, 0xdd, 0xffff, 0x80000001, 0x1, 0x8, 0x2, 0x8, 0x8, 0x1, 0x1, 0x401, 0xffffffc0, 0x8, 0x8, 0xffffd848, 0x2]}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001540)={0x43, 0x9, 0x2, {0x8, 0x3, 0xffffffff, 0x4, 0x7f, 0x7f, 0x80, 0x8, 0xc642}}, 0x43) write$P9_RATTACH(r1, &(0x7f00000015c0)={0x14, 0x69, 0x2, {0x1, 0x0, 0x6}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'gretap0\x00'}) r3 = accept(r0, &(0x7f0000001640)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000016c0)=0x80) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000001740)={0x0, @l2={0x1f, 0xff13, @any, 0x81, 0x2}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3}}, @llc={0x1a, 0x10f, 0x20, 0x9, 0x15, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x27d, 0x0, 0x0, 0x0, 0xfff, &(0x7f0000001700)='ip6gretap0\x00', 0x401, 0x3, 0x1ff}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001840)={0x0, @multicast1, @multicast2}, &(0x7f0000001880)=0xc) 03:27:35 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x40010, 0xffffffffffffffff, 0xa5ad3000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @initdev}, &(0x7f0000000040)=0xc) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r2 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xca0}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x1, 0x5, 0x3}, {0x0, 0x0, 0x7, 0x3f}, {0x4, 0x3, 0x1c, 0x5}, {0x3f, 0x7, 0x8c, 0x8001}, {0x6, 0x81, 0x5, 0x3ff}, {0x6, 0x20, 0x4, 0x4}, {0x2, 0x2, 0x0, 0x1000}, {0x6, 0x7, 0x0, 0x3484}, {0x1f, 0x1, 0x5, 0xa7b}, {0x6, 0x88, 0x1, 0xa00000}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x240040c0}, 0x44804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x72}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x80) getsockname(r1, &(0x7f0000000600)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, &(0x7f0000000680)=0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf4, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000000}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48d4}, 0x20048000) r8 = accept(r1, &(0x7f0000000880)=@hci, &(0x7f0000000900)=0x80) getsockname(r8, &(0x7f0000000940)=@generic, &(0x7f00000009c0)=0x80) r9 = memfd_secret(0x0) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000a40)={0x0, @phonet={0x23, 0x6c, 0x4, 0x2f}, @qipcrtr={0x2a, 0x1}, @ax25={0x3, @null, 0x8}, 0x8000, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000a00)='wg1\x00', 0x4, 0x9e1, 0x8}) r10 = socket$inet(0x2, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000ac0)={'vlan1\x00'}) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) [ 122.958692] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 122.960760] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 122.962163] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 122.966228] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 122.968601] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 122.970023] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 122.974715] Bluetooth: hci7: HCI_REQ-0x0c1a [ 124.931523] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 124.932904] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 124.996536] Bluetooth: hci7: command 0x0409 tx timeout [ 127.043537] Bluetooth: hci7: command 0x041b tx timeout [ 127.176279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.178426] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.180430] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.183947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.186596] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 127.190231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.196184] Bluetooth: hci4: HCI_REQ-0x0c1a [ 127.263613] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.268504] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.270566] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.276889] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.279608] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 127.290299] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.296863] Bluetooth: hci6: HCI_REQ-0x0c1a [ 129.092537] Bluetooth: hci7: command 0x040f tx timeout [ 129.220562] Bluetooth: hci4: command 0x0409 tx timeout [ 129.348535] Bluetooth: hci6: command 0x0409 tx timeout [ 131.139518] Bluetooth: hci7: command 0x0419 tx timeout [ 131.267506] Bluetooth: hci4: command 0x041b tx timeout [ 131.395514] Bluetooth: hci6: command 0x041b tx timeout [ 133.315501] Bluetooth: hci4: command 0x040f tx timeout [ 133.444563] Bluetooth: hci6: command 0x040f tx timeout [ 135.363647] Bluetooth: hci4: command 0x0419 tx timeout [ 135.491554] Bluetooth: hci6: command 0x0419 tx timeout 03:28:17 executing program 3: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x801, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x801, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x2012, {0x10, 0x4}, 0x4, r1, 0xee00, 0x1ff, 0x2, 0x9f61, 0x5, 0xa7, 0x6, 0x3ff, 0x1f, 0x99c0, 0x8, 0xffffffffffff5187, 0x2, 0x0, 0x1, 0x1}}, 0xa0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x11, 0xffffffffffffffff, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x4) write$9p(r2, &(0x7f0000000200)="f9a9a031e9c6d7330a1c7d7631fd7c2cdeb990da580ef35434e15f7fc64a1b034a53dec3e6bfbd08f61edcded7235e6a400caac65e72f4ef53fdd810480ef44ed2882f6bf8548217f6b8a7b8646c9eb201f6308a61f873da6b45ee98f4816c9e81ce35", 0x63) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x38, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x2}, @dead_binder_done, @exit_looper, @enter_looper, @decrefs, @decrefs={0x40046307, 0x2}, @dead_binder_done], 0xac, 0x0, &(0x7f00000002c0)="b799bfcff98c13a7bd71282828b8536f78053eb55baa53c9b4d40e3a578d3d55d2db48f403b7b6c98054e0eb84bad2fcb5edaeeaba37f6ec98b57e1454a8a1198a413fa75cd74b0265b13701a8a8657c6bdf186c84c2a42234aba88120f7fc4db65807b86c684ee445597403c11a3da9df9bf6c0fbd4676c9ce6678933b2866af584a60990392003849471a848bfa5fd04487826809d11bafbde6e825c3e86778ec05640479b3c10ed5d2272"}) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000003c0)=0x7, 0x4) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000400)={0x3, 0x2, 0x8}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x308}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x8000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x29, 0x51, 0x5, 0x7, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x54d, 0x5}}) r5 = memfd_secret(0x0) write$P9_RMKNOD(r5, &(0x7f00000007c0)={0x14, 0x13, 0x2, {0x78, 0x0, 0x5}}, 0x14) 03:28:17 executing program 0: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x2, 0x0, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x7b4c8df1, 0x40040) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x1, 0x2, 0x5}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r2, &(0x7f0000000140)="e5d9963b2ffeb902331a9f28aac6200f47fb0b55f435501b89bd59c0ff", 0x1d) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$snapshot(r3, &(0x7f00000001c0)=""/215, 0xd7) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1001, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x77) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r6 = fsmount(r5, 0x0, 0x83) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x6, 0x0, 0x9, 0x80, 0x0, 0x20, 0x242, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000400), 0x7}, 0x24, 0x6, 0x8, 0x9, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0x10, r6, 0x2) bind$bt_sco(r6, &(0x7f00000004c0), 0x8) r7 = syz_open_dev$hiddev(&(0x7f0000000500), 0x5fc10fb5, 0xf2000) ioctl$HIDIOCSUSAGES(r7, 0x501c4814, &(0x7f0000000540)={{0x3, 0x200, 0x7f, 0x9, 0x1, 0x101}, 0x2fb, [0x7, 0x8000, 0x0, 0x5, 0x8, 0x7, 0x401, 0xbeb8, 0x4bfb380, 0x7fffffff, 0x1000, 0x2, 0x3, 0x4, 0x2, 0x6, 0x9, 0x3fe, 0x8, 0x81, 0x401, 0x6, 0x3, 0x81, 0xff, 0x4, 0x3, 0x8000, 0x0, 0x3, 0x8001, 0x3f, 0x3, 0x9af, 0x3, 0x80000001, 0x891, 0x7fffffff, 0x8, 0x81, 0x1000, 0x7, 0x0, 0x5, 0x83, 0x433, 0xffff, 0x1, 0xfe, 0x1000, 0x101, 0x0, 0x4, 0x1, 0xffff, 0x32d, 0x9, 0x20, 0xffffffff, 0x7, 0x9473048, 0x3, 0x3cba, 0x1, 0x6, 0xca8c, 0x0, 0x7, 0x5, 0x80, 0x3, 0x1, 0xfd18, 0x9, 0x0, 0x5, 0x8, 0xffff, 0x3, 0x8, 0x5, 0x3, 0x6, 0x4, 0x7, 0x7, 0xfffff001, 0x74af, 0x0, 0x80000001, 0x5, 0x9, 0x400, 0x80000001, 0x1000, 0x8, 0x7, 0xffffffb1, 0x1, 0x5, 0x1, 0x1, 0x9, 0x7fff, 0x5, 0x68e, 0x400, 0x40b, 0x61, 0x7fffffff, 0xfffff65c, 0x7, 0x800, 0x3, 0xccf6, 0x3, 0x10001, 0xc0, 0x7b8, 0x80000001, 0x5, 0x1, 0x2, 0x7fffffff, 0x1, 0x1, 0x0, 0x7fffffff, 0x30, 0xd2, 0x5, 0x9, 0x31e, 0x7, 0x9, 0x0, 0x1, 0x3f, 0x6a619927, 0x3, 0x8, 0x4, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7fffffff, 0x10000, 0x7c4, 0x0, 0x101, 0x8, 0x2, 0x0, 0x3, 0x2, 0x80000000, 0xf4eb, 0x7fffffff, 0x7, 0xfff, 0x8, 0x9f, 0x81, 0x4, 0x5, 0x3, 0xffffffa0, 0x0, 0x7f, 0x7, 0x9, 0x7, 0x3, 0x7, 0x9, 0x5, 0x1, 0x81, 0x0, 0x400000, 0x6, 0x6, 0x3, 0x2457, 0x1, 0x2, 0xc2e, 0x8, 0x2, 0x7fffffff, 0x7, 0x5, 0x0, 0x54, 0x4c, 0xffffffe1, 0x0, 0x81, 0x81, 0xfffffffd, 0xffffffff, 0x1, 0x80, 0xfffff1c8, 0x9, 0x6, 0x242aff92, 0x1, 0x3, 0xffffffff, 0x10001, 0x9, 0x2, 0x80000001, 0xffffffff, 0x1000, 0x9, 0x3ff, 0xb3af, 0x5, 0x10000, 0x8f5b, 0x4, 0x0, 0x500, 0xab61, 0x2, 0xfff, 0x200, 0x5, 0x5, 0x2, 0x7f, 0x64e42e36, 0x3f, 0x5, 0xa9, 0xfffff845, 0x100000, 0x596, 0x5, 0x9, 0x0, 0x10, 0x5, 0x0, 0x2, 0xe858, 0x1, 0x0, 0x7, 0x3, 0x6, 0x5, 0x6f85, 0x7ced, 0x7, 0x5, 0x2, 0x1, 0x8, 0x6, 0x1ff, 0x9095, 0x0, 0xfffffffe, 0x8, 0x3, 0x0, 0x7ff, 0x80, 0x854b, 0xffffffd0, 0x7, 0x3, 0x81b, 0x5, 0x6c, 0x8f, 0xfffffffc, 0x40, 0x2, 0x6, 0x401, 0x5, 0x1, 0x9, 0x1, 0x3f, 0x3, 0x100, 0x2, 0x3ff, 0x7, 0x5, 0x1, 0x8, 0x80, 0x7, 0x3ff, 0x2, 0x9, 0x4e, 0x101, 0x0, 0x1, 0x2, 0x800, 0x10001, 0x2, 0x2, 0x5, 0x3, 0x2bf8, 0x40, 0x3, 0x0, 0x1, 0x6, 0x5, 0x84db, 0x2000, 0x9c, 0x7fff, 0x3, 0x0, 0xe944, 0x6, 0x7, 0x8, 0x9, 0x7ff, 0x2, 0x9, 0x2, 0x2, 0x8, 0x0, 0x1, 0x5, 0x7fff, 0x5, 0x87, 0x602, 0x0, 0x3f, 0x3, 0x800, 0x2, 0x6, 0x3ff, 0x1f, 0xffffffff, 0x3, 0x362d, 0x0, 0x3, 0x81, 0x800, 0x212, 0x6, 0xff, 0x5, 0x8000, 0x0, 0x7, 0x5a7f, 0x5, 0x1, 0x3, 0x0, 0x4, 0x80000001, 0x3f, 0x5, 0x80000001, 0x5, 0xff, 0x2, 0x6, 0xcc, 0x10001, 0x400, 0x4147, 0x4, 0x400, 0xa0c, 0x4, 0xd430, 0x6, 0x6, 0x9, 0xccac, 0x2, 0x9, 0xeca, 0x800, 0x5, 0x9, 0x4, 0x0, 0xcf75, 0x9, 0x9, 0x7, 0x8001, 0x2, 0x1, 0x0, 0x1000, 0xfff, 0x8, 0x1, 0x3, 0x8e5, 0xffffff59, 0x738, 0x8, 0x38000, 0xb4f, 0x55e3, 0x7, 0x2, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x0, 0x3, 0x10, 0x5, 0x3, 0x3, 0x7, 0x2, 0x10000, 0x6, 0x1000, 0x1, 0x8000, 0x5, 0x3, 0x2, 0x9, 0x7, 0x8000000, 0x2, 0x1ff, 0x100, 0xbf0, 0x9, 0x40, 0x849f, 0x2, 0x81, 0x3ff, 0xfffffbff, 0x7fff, 0x7fff, 0xcb, 0x10000, 0x678, 0x100, 0xfffff801, 0x1ff, 0x72, 0x4, 0x7f, 0x4, 0x9a5d, 0x8, 0x100, 0x51af, 0x8, 0x7f, 0x7c, 0x0, 0x9, 0x5, 0x2, 0x45b5, 0x5, 0x5, 0x1, 0x8, 0xffff, 0x7, 0xfffffff7, 0x2c, 0x3ff, 0x2, 0x2, 0x8001, 0x4, 0xfff, 0x7, 0xba, 0x595, 0xffffffff, 0x7f, 0x200, 0x5, 0x0, 0x2, 0x3, 0x5, 0x5, 0x4f17, 0x7, 0x4, 0x1, 0x800, 0x7, 0xffff7fff, 0x7, 0x6, 0x6, 0x7, 0x0, 0x8, 0x101, 0xffffff00, 0xbab5, 0x6, 0x3, 0xa6, 0x8, 0x4, 0x104, 0x2c8500, 0x1, 0x7, 0x8, 0x7fffffff, 0x9, 0x81, 0x0, 0x9, 0x5, 0x5, 0x100, 0x1, 0x99b4, 0x0, 0x4, 0x100, 0x5, 0xd642, 0x52, 0xe2945d, 0x4, 0x20, 0x8, 0x1, 0x80, 0x40, 0x0, 0x399f, 0x9, 0x8, 0x6d, 0xc04, 0x3f, 0x2, 0x3, 0xa8, 0x7, 0x8, 0x8, 0x40, 0xffffffff, 0x5, 0x7fff, 0x81, 0xffffff00, 0x7fff, 0xd18, 0x2, 0x0, 0xe9, 0x7fffffff, 0x0, 0x4, 0x9, 0x401, 0xe00, 0xfffffff7, 0x7, 0x800, 0x9, 0xffffffff, 0x7, 0x4, 0x21e, 0x400, 0xfffffffd, 0xffffffff, 0x40, 0x7, 0x8, 0x6, 0x9, 0x5, 0x8, 0x2, 0x6, 0x6, 0x5, 0xd7b3, 0x20, 0x8, 0x5, 0x0, 0x7fff, 0x5, 0x5, 0x5, 0x8, 0x6, 0x2, 0xfffffff2, 0x4, 0x8, 0x1, 0xffffffff, 0x1, 0x2, 0x3, 0x4, 0x0, 0x3, 0x6, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xfffffbff, 0xffffff7f, 0x1, 0x0, 0x5f, 0x200, 0xcb, 0x6, 0x7, 0x1, 0x4, 0xcbe, 0x0, 0x3, 0xc6e9, 0x2, 0x2, 0x7fff, 0xb02, 0x46, 0x6, 0x7, 0x4, 0x6, 0x800, 0x292, 0x0, 0x800, 0x9, 0x80000000, 0x0, 0x2, 0xfd, 0xb18, 0x370d28c4, 0x9, 0xffffffff, 0x800, 0xb860, 0x3, 0x1, 0x9, 0x5, 0x4, 0x4, 0x7f, 0x4, 0x7f, 0x81, 0x8, 0xd1a9, 0x0, 0x57, 0x4, 0x3, 0x6, 0x8000, 0x0, 0x6, 0x8001, 0x0, 0xffffffff, 0xfffffffd, 0x1, 0x8, 0x3, 0x5, 0xc0000000, 0xfff, 0xac, 0x1f, 0x101, 0x3, 0x3ff, 0x1, 0x7, 0x1000, 0x80000000, 0x8, 0x0, 0x10001, 0x0, 0xd0, 0x6, 0x7, 0x3, 0x1b1e, 0x1, 0x5, 0xfffffffd, 0x0, 0x8, 0x4, 0x7fff, 0xa1a6, 0x81, 0xd407, 0x4, 0x4, 0x1f, 0x1ff, 0x5, 0xa5c, 0x2, 0x7, 0x3, 0x3, 0x4, 0x8, 0xfa, 0xc2a, 0x401, 0x8, 0x20, 0x400, 0x368dd918, 0x80000000, 0x7, 0x6103c46d, 0x2, 0x78, 0x0, 0x8, 0xe7, 0x0, 0x3, 0x80000001, 0x1ff, 0x500, 0x81, 0x7d, 0x0, 0x70000, 0x6, 0x0, 0xd1, 0xffff893f, 0x7, 0x0, 0x2, 0x1, 0xfffffeff, 0x6, 0x82, 0x5, 0x80, 0x9, 0xd6e, 0x70d5, 0x8, 0xfffffff8, 0x2, 0x80000000, 0x2, 0x10001, 0xffffffff, 0x8, 0x8, 0x40, 0xff, 0x2, 0xffffffff, 0x1c, 0x80000000, 0x8000, 0x5, 0x40, 0x10000, 0x401, 0x5, 0x6, 0x200, 0xffffffe0, 0x6, 0x6, 0x1, 0x5aa, 0x2, 0xffffffff, 0x20, 0x20eef9e0, 0x80000000, 0x9, 0x800, 0x800, 0x3, 0x2, 0x2, 0x3, 0x100, 0x3, 0x3, 0x8001, 0xab16a4d3, 0x1fff, 0x4, 0x6, 0x80000001, 0x10000, 0x2, 0x2, 0xb1f166b, 0x3, 0x8, 0x4, 0x4, 0x8, 0x7, 0xffffffff, 0xd1, 0x8, 0x6, 0x800, 0x1, 0xfff, 0xffffffff, 0x0, 0xfffffff7, 0x5, 0x8, 0x4, 0x8, 0x8, 0x7aaa30a8, 0x101, 0x8, 0x7ff, 0x9, 0x8, 0x19f, 0x3, 0xbbb6, 0x1000, 0x7ff, 0x0, 0x3ff, 0x100, 0x1, 0x9, 0x0, 0x0, 0x9, 0x88e8, 0x1, 0x453c, 0x0, 0x1, 0x400, 0x0, 0x2, 0xda, 0x7, 0x3ff, 0xfffffbff, 0x7, 0x7, 0x10000, 0x4, 0x80, 0x7fffffff, 0x9, 0x401, 0x81, 0x1ff, 0x6, 0x8, 0x5, 0x4607, 0x9, 0x7, 0xff, 0x7fffffff, 0x6, 0x400, 0x9, 0x0, 0x800, 0x7, 0x5, 0x80000001, 0x9, 0x5, 0x6, 0x8, 0x2, 0x9721, 0x9, 0x8, 0x0, 0x400, 0x200, 0x4, 0x2, 0x5, 0xffff, 0x9, 0x3f, 0x1, 0x8001, 0x8, 0x7, 0xb47, 0x9, 0x6, 0x9, 0x9, 0x5, 0x3, 0x10001, 0xffffffff, 0x4, 0x3, 0x1, 0x7, 0x200, 0x7, 0x3, 0x4, 0x1, 0x7fffffff, 0x5, 0x7f, 0x4, 0x81, 0x0, 0x200, 0x0, 0x5, 0x800, 0x4, 0x7, 0x6, 0x3, 0x9, 0x5, 0x401, 0x80000000, 0x1ff, 0xfffffffc, 0x5, 0xffffffff, 0xfff, 0x2, 0x9, 0x6, 0x1000, 0x90, 0xb391, 0x3, 0x81, 0x17, 0x0, 0x1, 0x6, 0x5, 0x4, 0xffff, 0x9, 0x3, 0xba, 0x1, 0x10001, 0xffffffff, 0x2, 0x4f43, 0x11, 0x40, 0x1000000, 0x10000, 0x9, 0x8, 0x6, 0xffffa48e, 0x0, 0x7, 0x1000, 0x7fffffff, 0x3, 0x7, 0x3, 0x4, 0x1, 0xe00, 0x3ff]}) r8 = fsmount(r6, 0x1, 0x5) read$snapshot(r8, &(0x7f0000001580)=""/94, 0x5e) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x3) 03:28:17 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x40010, 0xffffffffffffffff, 0xa5ad3000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @initdev}, &(0x7f0000000040)=0xc) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r2 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xca0}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x1, 0x5, 0x3}, {0x0, 0x0, 0x7, 0x3f}, {0x4, 0x3, 0x1c, 0x5}, {0x3f, 0x7, 0x8c, 0x8001}, {0x6, 0x81, 0x5, 0x3ff}, {0x6, 0x20, 0x4, 0x4}, {0x2, 0x2, 0x0, 0x1000}, {0x6, 0x7, 0x0, 0x3484}, {0x1f, 0x1, 0x5, 0xa7b}, {0x6, 0x88, 0x1, 0xa00000}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x240040c0}, 0x44804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x72}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x80) getsockname(r1, &(0x7f0000000600)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, &(0x7f0000000680)=0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf4, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000000}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48d4}, 0x20048000) r8 = accept(r1, &(0x7f0000000880)=@hci, &(0x7f0000000900)=0x80) getsockname(r8, &(0x7f0000000940)=@generic, &(0x7f00000009c0)=0x80) r9 = memfd_secret(0x0) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000a40)={0x0, @phonet={0x23, 0x6c, 0x4, 0x2f}, @qipcrtr={0x2a, 0x1}, @ax25={0x3, @null, 0x8}, 0x8000, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000a00)='wg1\x00', 0x4, 0x9e1, 0x8}) r10 = socket$inet(0x2, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000ac0)={'vlan1\x00'}) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) 03:28:17 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLERROR(r0, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '%'}}, 0xa) write$P9_RREAD(r0, &(0x7f0000000040)={0x10a, 0x75, 0x1, {0xff, "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"}}, 0x10a) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x81, 0xf9, 0x1, 0x0, 0x68, 0x240, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100c0, 0xf1, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x30, 0x8, 0x0, 0x0, 0x8, 0x200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1400, 0x6, 0xffffffff, 0x3, 0x5, 0xff, 0x3ff, 0x0, 0x100, 0x0, 0x100000000}, 0x0, 0x7, r1, 0x4) write$P9_RLERROR(r0, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x841) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x39, 0x10601) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/93) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000500)={{0x3, 0x100, 0x1, 0xc11, 0x2, 0x81}, 0xf6, [0x8, 0x401, 0x3f, 0x1, 0x10000, 0x3, 0x1ff, 0x5, 0x101, 0x9, 0x3, 0x3, 0x6, 0x7, 0x0, 0x5, 0x100, 0x7ff, 0x7ff, 0x0, 0x7fff, 0x7, 0x0, 0x8542, 0xa, 0xfffffff9, 0x1, 0x6, 0x82, 0x7, 0x5, 0x5, 0xff, 0x2, 0x80000001, 0x0, 0x10001, 0x0, 0x3ff, 0x2, 0x5, 0x1, 0x5, 0x1, 0x1, 0xeb9f, 0x8, 0x8001, 0x4, 0x6, 0x401, 0x8, 0x1, 0x20, 0xef, 0x0, 0x200, 0x2, 0x3, 0x8, 0xfffffffd, 0x3, 0x7, 0x56, 0x9bd6, 0x7, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x14000000, 0x7fffffff, 0x7, 0x1ff, 0x56, 0x8001, 0x400, 0x4, 0x8000, 0xfff, 0x3, 0x4, 0x3ff, 0x3, 0x1, 0x1f, 0xfff, 0x200, 0x9, 0x7, 0x3c3f, 0xfff, 0x5, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0x7, 0x4, 0x6, 0x101, 0x0, 0x7, 0x7, 0x400, 0xd1, 0x10001, 0x6, 0x1, 0x100, 0x3, 0x7, 0x4, 0x7fff, 0x2, 0x5, 0xf2, 0x113d70bb, 0x3, 0xffffffff, 0x1f, 0x20, 0x6, 0x8, 0x401, 0x6, 0x7f, 0x6, 0x3f, 0x3, 0x401, 0x5, 0x1, 0x80, 0x8, 0x10000, 0x7fff, 0x1, 0x1, 0x10000, 0x9, 0x5a7e9d0f, 0x4, 0x6, 0x8, 0x100, 0x8000, 0xfffffffc, 0x371b, 0x1, 0xd0, 0x1, 0x6, 0x200, 0x1, 0x675, 0xfffff229, 0x9, 0x2, 0x5, 0x3, 0x200, 0x30000, 0x1000, 0x4, 0xfffffeff, 0x5, 0x5, 0x100, 0x7, 0x10001, 0x1, 0x8, 0x8, 0x7fffffff, 0x8, 0x6, 0x7f, 0x5, 0x8, 0x8, 0x7fff, 0x2, 0x82b, 0x8001, 0x5, 0x5, 0x1f, 0x67, 0x20, 0x0, 0x1, 0x7, 0x101, 0x3, 0x0, 0xe69, 0x800, 0x0, 0x8, 0x1ff, 0xa4e1, 0xc92, 0x3, 0xa2e6, 0xfffffbff, 0x2, 0x0, 0x3, 0x3, 0x5, 0x0, 0x6f861b8b, 0x6, 0x80000001, 0x7217e9fb, 0x1, 0x401, 0x80, 0x7a880, 0x5, 0x0, 0x72e, 0x81, 0x40, 0x1000, 0x80000001, 0x4, 0x3, 0x1f, 0x37, 0x100, 0xce9, 0x80, 0x4, 0x80, 0x0, 0x200, 0x3, 0xfff, 0x7, 0x3f, 0x3, 0x80000001, 0x7, 0x3, 0x1ef, 0xfffffffb, 0x1, 0x2e5, 0x1, 0x101, 0x9, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x8, 0xfa7e, 0x401, 0x7, 0x0, 0x8d8, 0xbe6, 0x3, 0xec, 0x1, 0x9e, 0x6, 0x3, 0x1ff, 0xd373, 0x100, 0xe7, 0x0, 0xfffffffc, 0x1, 0x61877ea5, 0x9, 0x80000000, 0x200, 0x1, 0x0, 0x6f9, 0x2, 0x7fff, 0x5, 0x1ff, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x5, 0x4, 0xd040, 0x7fffffff, 0x7, 0x1, 0x2, 0x877a, 0x4, 0x35f, 0x9, 0x2, 0x2, 0x4, 0xffffffff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0xfffffffd, 0xd6c9, 0x5, 0x6, 0x7f, 0x20, 0x4, 0x3, 0xfffffff8, 0x401, 0x8, 0x9, 0x80000000, 0x9, 0x8000, 0x1ff, 0x2, 0x400, 0x8, 0x8000, 0x75, 0x6, 0x0, 0x3, 0x800, 0x9, 0x0, 0xdae, 0x9efc, 0x67, 0x401, 0xffffe130, 0x7, 0x0, 0x0, 0x3, 0xf768, 0x2, 0x4, 0x4, 0xd335, 0x7fffffff, 0x1, 0x0, 0x40, 0x9, 0x80000000, 0x0, 0x6, 0xffffffff, 0x200, 0x1, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x1, 0x81, 0x8, 0x8, 0x8, 0x0, 0x10000, 0x40, 0x3, 0x3, 0x3d056ec0, 0x9, 0x3, 0x1ff, 0xb5, 0x2, 0x4, 0x1ff, 0xef1d, 0x1, 0x4, 0x10001, 0x7fff, 0x1, 0x100, 0xfffffffd, 0x1, 0x9, 0x6, 0xca8f, 0xffffffff, 0x400, 0x3, 0x1e3b2463, 0x101, 0x401, 0x3f, 0x42c, 0x4, 0x10001, 0x62d, 0x0, 0x20, 0x5, 0x10000, 0x9, 0x1, 0xe123, 0x2, 0x1, 0xffff8000, 0x8, 0x3, 0x8001, 0xff, 0x3, 0x401, 0x100, 0x8000, 0x9, 0xcfc, 0xfffffffe, 0x8001, 0x4, 0xffff, 0xb9, 0x7, 0x0, 0x4, 0x1000, 0x1, 0x7ff, 0x7, 0x1, 0x0, 0xaff, 0x2, 0x8da, 0x99e, 0x0, 0x0, 0x5, 0x3, 0x20, 0x3f, 0x4, 0x3ff, 0x0, 0xeb76, 0x106, 0x1, 0x3, 0x80, 0x6, 0x9, 0x5, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x5, 0x1ff, 0x763, 0x80000000, 0xc, 0xe9, 0x3f, 0x1, 0xd7d2, 0x0, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x14, 0x2, 0x1, 0x3, 0xff, 0x80000001, 0xb7, 0x2e, 0x6, 0x61b, 0x3, 0x0, 0x3, 0x8001, 0x8, 0x5, 0xb2c, 0x101, 0x200, 0x3f, 0x7fff, 0x3, 0x2, 0x10000, 0x400, 0x2c, 0xcb5d, 0x7, 0x96c, 0x2, 0x7fff, 0x0, 0x80, 0x6, 0x5, 0x0, 0xf192, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x9, 0xd7fd, 0x4, 0x7, 0x5, 0x945, 0xfffffffc, 0x1, 0xfffff48a, 0x5, 0x5, 0xe0, 0x4, 0x3, 0x9, 0x80000000, 0x1f, 0x200, 0x0, 0xd8b, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0xffffffff, 0xffff, 0x401, 0x5, 0x4, 0x7fffffff, 0x8, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x0, 0xddd3, 0x2, 0x400000, 0x8, 0x40, 0x5d96, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x0, 0xc92, 0x100, 0x5, 0x6, 0x4, 0x9, 0x6, 0x101, 0x7, 0x7fff, 0x36e, 0x20, 0x20, 0x100, 0x200, 0xd874, 0x2, 0x20000, 0xd3, 0x8001, 0x3fc000, 0x3, 0x5, 0x40, 0x5, 0x4, 0x0, 0x9, 0x9, 0xff8, 0x7fff, 0x6, 0x1, 0x80000000, 0x8, 0x9, 0xf0, 0x200, 0x9, 0x10001, 0x0, 0x4d, 0x8000, 0xcd60, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x1f, 0x8, 0xfffffff8, 0x4, 0x6, 0x0, 0x5, 0x400, 0x4, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7f, 0xad9, 0x1, 0x7, 0x8000, 0x6, 0x2, 0x100, 0x9, 0x4, 0x1f, 0x200, 0x7, 0x2, 0x8, 0x7, 0x0, 0x8, 0x8, 0x40, 0xffffffff, 0x8, 0xfffffffc, 0x9, 0x8, 0x1, 0x8, 0xf7c, 0x9, 0x0, 0x2, 0x3, 0x10001, 0x97, 0x6, 0x9, 0x40, 0x7fff, 0xfffffff7, 0x463, 0x3, 0x2, 0x9, 0x15, 0x6, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0xe5e, 0x7f, 0x8, 0x4, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x1000, 0x7ff, 0x7, 0x3f, 0xff, 0x7, 0x4592, 0x1, 0x4, 0x2, 0x91f, 0x8, 0x4, 0x1, 0x100, 0x6cc6e587, 0xfffeffff, 0x8, 0x3f, 0x6, 0x5, 0x10001, 0x80000000, 0x4, 0x4, 0x8, 0x4, 0x8, 0x8, 0x6, 0xffff7a04, 0x9, 0xe1f, 0x0, 0x7, 0x9, 0x1ff, 0x400, 0x800, 0x3, 0x8001, 0x9, 0x4, 0x0, 0x5, 0xfff, 0x5, 0x9, 0x9, 0xf4, 0xff, 0x9, 0x83, 0x1, 0x7fffffff, 0x800, 0x401, 0xe68, 0x1a, 0x8000, 0xffff, 0x368, 0x5, 0x4, 0x3, 0x7, 0x9, 0x6d, 0x1, 0x9, 0xe2, 0x3, 0x0, 0x9, 0x0, 0x10001, 0x4a6909f, 0x1c, 0x6, 0x9, 0x560, 0x6, 0x10001, 0x1f7, 0x705, 0x5, 0x1435, 0x2, 0x6, 0x1ff, 0x20, 0xfffffff8, 0x4, 0x1, 0x100, 0xfffffffa, 0x9, 0x40, 0xfffffff9, 0x4, 0x9, 0x81, 0x6f5f, 0x81, 0xff, 0x7, 0x0, 0x4, 0x5, 0x8, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x0, 0x4, 0x3, 0x512, 0x7, 0x40, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0xffffed81, 0x7, 0x7, 0x1, 0x3, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x2, 0x2, 0x9, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4454, 0x6, 0x40dc, 0x8, 0x99ad, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5, 0xdfda, 0x0, 0x100, 0x2, 0x8, 0x37800000, 0x1, 0x1, 0x81, 0xc94c, 0x5, 0x80, 0x20, 0x7, 0x4, 0x3, 0x8, 0x711, 0x3e, 0x200, 0x6, 0x4b, 0x1f, 0x8, 0x2, 0x101, 0xd2c, 0x62fd1a7, 0x0, 0x9, 0x2, 0x1, 0x9, 0x0, 0x6ea, 0x6, 0x20, 0x8, 0xfffffff9, 0x8000, 0x20, 0x720f, 0x4, 0x4, 0x2, 0x1000, 0x5587, 0x800, 0xffff, 0xc30, 0x5, 0x7, 0x4, 0x8, 0x3c6e, 0x36000000, 0x1, 0x10, 0x800, 0x7, 0xebc7, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7, 0x7, 0x9, 0xffffffff, 0x0, 0x7f, 0x101, 0x1, 0x700, 0xf4a, 0x5, 0x3, 0x40, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x20, 0x6, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x5, 0x5, 0x6, 0x0, 0x7, 0x19, 0x9, 0x1f, 0x9, 0x800, 0x6, 0x9, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x33, 0x0, 0x80000001, 0xdd, 0xffff, 0x80000001, 0x1, 0x8, 0x2, 0x8, 0x8, 0x1, 0x1, 0x401, 0xffffffc0, 0x8, 0x8, 0xffffd848, 0x2]}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001540)={0x43, 0x9, 0x2, {0x8, 0x3, 0xffffffff, 0x4, 0x7f, 0x7f, 0x80, 0x8, 0xc642}}, 0x43) write$P9_RATTACH(r1, &(0x7f00000015c0)={0x14, 0x69, 0x2, {0x1, 0x0, 0x6}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'gretap0\x00'}) r3 = accept(r0, &(0x7f0000001640)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000016c0)=0x80) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001840)={0x0, @multicast1, @multicast2}, &(0x7f0000001880)=0xc) 03:28:17 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x1, 0x81}) r1 = socket(0x29, 0x3, 0x7ff) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = accept(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000180)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x0, 0x9, 0x0, @loopback, @private2, 0x0, 0x10, 0x8, 0xce}}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={0x0, @can, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @can={0x1d, r4}, 0xf3, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)='gre0\x00', 0x8, 0xe777, 0xd}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000400)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000440)={0x4a, 0x6f, 0x1, {0x5, [{0x0, 0x1, 0x8}, {0x40, 0x2, 0x8}, {0x80, 0x4, 0x1}, {0x2, 0x4, 0x1}, {0x0, 0x0, 0x6}]}}, 0x4a) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RCLUNK(r5, &(0x7f00000004c0)={0x7, 0x79, 0x1}, 0x7) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000500)=0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = fsmount(r5, 0x1, 0xd) write$P9_RSETATTR(r6, &(0x7f0000000540)={0x7, 0x1b, 0x1}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000580)) ioctl$HIDIOCGFIELDINFO(r6, 0xc038480a, &(0x7f00000005c0)={0x1, 0x3, 0xbe3, 0x3f, 0x1, 0x101, 0x40, 0x20, 0x3, 0x4, 0xf0000000, 0x80, 0x4, 0x5}) ioctl$HIDIOCGFLAG(r5, 0x8004480e, &(0x7f0000000600)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000640)) 03:28:17 executing program 4: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) r0 = memfd_secret(0x0) write$P9_RSTAT(r0, &(0x7f0000000040)={0x48, 0x7d, 0x1, {0x0, 0x41, 0x9, 0xf40, {0x20, 0x0, 0x8}, 0x81810000, 0x9, 0x1, 0x5, 0x7, '$[@#})&', 0x0, '', 0x5, '\\*,,)', 0x2, '.!'}}, 0x48) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x400) write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000140)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x80, 0x3, 0x3}}, 0x14) io_setup(0x4, &(0x7f00000001c0)) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) write$P9_RVERSION(r0, &(0x7f0000000280)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000002c0)={0x8, 0x40e}) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xef7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000440)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 03:28:17 executing program 6: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0xdf, 0x75, 0x2, {0xd4, "b275d947f5f8de0d9e8e74b350e3d6b6b5f0f28b685f9798d1424413b696397acccdca8a9b612efaf1e0971c4723dac113fdc6df952912f2168cb3815f103424f08a651c6507b96983cf64a6a71fb3c2023980b193fc04202c65a4479ee0f019d6fc8917c3b4c075915460b88b3204c0da5c8e9d07f75721ccafbcde84ec0b9dc5c2a246bfe79d54b0d7468a6040b609e784070f7219e9e7d29ea12a742e8883bcb0567530400c8c96f2512390b927453dd71a9f090467d6c6335464cff68a39dd99b332c0161f07fc3c2e13d0b1358cdc20a092"}}, 0xdf) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0xde1a, 0xfff, {0x20, 0x4, 0x8}, 0x4a000000, 0x20, 0x8ee, 0x6, 0x2, ')&', 0x1, '!', 0x1, '#', 0x2, '%$'}, 0x1, '\\', 0xffffffffffffffff, 0xee01}}, 0x4f) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x1, 0x2, 0x3}}, 0x14) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000280)={0x9, 0x7, 0x1}, 0x9) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x33, 0x2}, 0x7) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104800) write$P9_RLERRORu(r0, &(0x7f0000000340)={0xe, 0x7, 0x2, {{0x1, '\\'}, 0x9a74}}, 0xe) write$P9_RLERRORu(r0, &(0x7f0000000380)={0xe, 0x7, 0x1, {{0x1, '#'}, 0x9}}, 0xe) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCLUNK(r2, &(0x7f0000000400)={0x7, 0x79, 0x2}, 0x7) r3 = memfd_secret(0x80000) write$P9_RXATTRWALK(r3, &(0x7f0000000440)={0xf, 0x1f, 0x2, 0x9}, 0xf) write$P9_RREADDIR(r0, &(0x7f0000000480)={0x122, 0x29, 0x1, {0x4, [{{0x80, 0x1, 0x4}, 0x7f, 0x2d, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x5, 0x6, 0x7, './file0'}, {{0x4, 0x3, 0x6}, 0x7, 0x6, 0x7, './file0'}, {{0x43, 0x0, 0x4}, 0xffffffffffffff01, 0x8, 0x7, './file0'}, {{0x4, 0x4, 0x2}, 0x286, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x2, 0x1}, 0x1000, 0x7, 0x7, './file0'}, {{0x20, 0x0, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x1, 0x3}, 0x6, 0x4, 0x7, './file0'}]}}, 0x122) write$P9_RREAD(r1, &(0x7f00000005c0)={0x4b, 0x75, 0x1, {0x40, "43747de04873d2a8d07cd050afe9ca3658dcc402633223e2dc04ee32b81f68c81d136033b36631cc325407d42c3f8aebec81cd4d12a6caf677f5f80b63a1c4e6"}}, 0x4b) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7b, 0x1}, 0x7) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000680)={0xb27e, 0xfffffffa, 0x5}) write$P9_RUNLINKAT(r0, &(0x7f00000006c0)={0x7, 0x4d, 0x1}, 0x7) 03:28:17 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x20}, 0x8001}}, 0x18) r1 = memfd_secret(0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x1, 0x0, 0x6}}, 0x14) r2 = memfd_secret(0x0) write$P9_RWALK(r2, &(0x7f0000000140)={0x8b, 0x6f, 0x2, {0xa, [{0x1, 0x1, 0x8}, {0x2, 0x3, 0x6}, {0x2, 0x3, 0x4}, {0x80, 0x2, 0x6}, {0x10, 0x2, 0x5}, {0x0, 0x3, 0x3}, {0x10, 0x0, 0x8}, {0x80, 0x3, 0x3}, {0x80, 0x4, 0x5}, {0x4, 0x2, 0x5}]}}, 0x8b) write$P9_RLOCK(r1, &(0x7f0000000200)={0x8, 0x35, 0x2, 0x3}, 0x8) write$P9_RCLUNK(r0, &(0x7f0000000240)={0x7, 0x79, 0x1}, 0x7) r3 = fsmount(r1, 0x1, 0xe1) write$P9_RSYMLINK(r3, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x80, 0x2, 0x6}}, 0x14) write$P9_RCLUNK(r3, &(0x7f00000002c0)={0x7, 0x79, 0x1}, 0x7) write$P9_RREADDIR(r2, &(0x7f0000000300)={0xc5, 0x29, 0x1, {0x4, [{{0x8, 0x2, 0x6}, 0x400, 0x81, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x1, 0x7, 0x7, './file0'}, {{0x10, 0x2, 0x5}, 0x7, 0x9, 0x7, './file0'}, {{0x4, 0x4, 0x5}, 0x5, 0x7f, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x8, 0x20, 0x7, './file0'}, {{0x0, 0x2, 0x1}, 0x81, 0x80, 0x7, './file0'}]}}, 0xc5) write$P9_RXATTRWALK(r0, &(0x7f0000000400)={0xf, 0x1f, 0x2, 0x1f}, 0xf) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) write$P9_RGETATTR(r0, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0x1220, {0x10, 0x4, 0x2}, 0x0, r4, r5, 0x6fbd, 0x8, 0x5, 0x81, 0xf2, 0x28, 0x9, 0x7, 0x2, 0x3, 0x8000000000000, 0x6, 0x8, 0x3, 0x7}}, 0xa0) r6 = accept$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x14) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000700), &(0x7f0000000740)=0x10) 03:28:30 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x1, 0x81}) r1 = socket(0x29, 0x3, 0x7ff) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = accept(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000180)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x0, 0x9, 0x0, @loopback, @private2, 0x0, 0x10, 0x8, 0xce}}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={0x0, @can, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @can={0x1d, r4}, 0xf3, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)='gre0\x00', 0x8, 0xe777, 0xd}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000400)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000440)={0x4a, 0x6f, 0x1, {0x5, [{0x0, 0x1, 0x8}, {0x40, 0x2, 0x8}, {0x80, 0x4, 0x1}, {0x2, 0x4, 0x1}, {0x0, 0x0, 0x6}]}}, 0x4a) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RCLUNK(r5, &(0x7f00000004c0)={0x7, 0x79, 0x1}, 0x7) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000500)=0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = fsmount(r5, 0x1, 0xd) write$P9_RSETATTR(r6, &(0x7f0000000540)={0x7, 0x1b, 0x1}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000580)) ioctl$HIDIOCGFIELDINFO(r6, 0xc038480a, &(0x7f00000005c0)={0x1, 0x3, 0xbe3, 0x3f, 0x1, 0x101, 0x40, 0x20, 0x3, 0x4, 0xf0000000, 0x80, 0x4, 0x5}) ioctl$HIDIOCGFLAG(r5, 0x8004480e, &(0x7f0000000600)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000640)) 03:28:30 executing program 6: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0xdf, 0x75, 0x2, {0xd4, "b275d947f5f8de0d9e8e74b350e3d6b6b5f0f28b685f9798d1424413b696397acccdca8a9b612efaf1e0971c4723dac113fdc6df952912f2168cb3815f103424f08a651c6507b96983cf64a6a71fb3c2023980b193fc04202c65a4479ee0f019d6fc8917c3b4c075915460b88b3204c0da5c8e9d07f75721ccafbcde84ec0b9dc5c2a246bfe79d54b0d7468a6040b609e784070f7219e9e7d29ea12a742e8883bcb0567530400c8c96f2512390b927453dd71a9f090467d6c6335464cff68a39dd99b332c0161f07fc3c2e13d0b1358cdc20a092"}}, 0xdf) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0xde1a, 0xfff, {0x20, 0x4, 0x8}, 0x4a000000, 0x20, 0x8ee, 0x6, 0x2, ')&', 0x1, '!', 0x1, '#', 0x2, '%$'}, 0x1, '\\', 0xffffffffffffffff, 0xee01}}, 0x4f) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x1, 0x2, 0x3}}, 0x14) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000280)={0x9, 0x7, 0x1}, 0x9) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x33, 0x2}, 0x7) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104800) write$P9_RLERRORu(r0, &(0x7f0000000340)={0xe, 0x7, 0x2, {{0x1, '\\'}, 0x9a74}}, 0xe) write$P9_RLERRORu(r0, &(0x7f0000000380)={0xe, 0x7, 0x1, {{0x1, '#'}, 0x9}}, 0xe) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCLUNK(r2, &(0x7f0000000400)={0x7, 0x79, 0x2}, 0x7) r3 = memfd_secret(0x80000) write$P9_RXATTRWALK(r3, &(0x7f0000000440)={0xf, 0x1f, 0x2, 0x9}, 0xf) write$P9_RREADDIR(r0, &(0x7f0000000480)={0x122, 0x29, 0x1, {0x4, [{{0x80, 0x1, 0x4}, 0x7f, 0x2d, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x5, 0x6, 0x7, './file0'}, {{0x4, 0x3, 0x6}, 0x7, 0x6, 0x7, './file0'}, {{0x43, 0x0, 0x4}, 0xffffffffffffff01, 0x8, 0x7, './file0'}, {{0x4, 0x4, 0x2}, 0x286, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x2, 0x1}, 0x1000, 0x7, 0x7, './file0'}, {{0x20, 0x0, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x1, 0x3}, 0x6, 0x4, 0x7, './file0'}]}}, 0x122) write$P9_RREAD(r1, &(0x7f00000005c0)={0x4b, 0x75, 0x1, {0x40, "43747de04873d2a8d07cd050afe9ca3658dcc402633223e2dc04ee32b81f68c81d136033b36631cc325407d42c3f8aebec81cd4d12a6caf677f5f80b63a1c4e6"}}, 0x4b) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7b, 0x1}, 0x7) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000680)={0xb27e, 0xfffffffa, 0x5}) write$P9_RUNLINKAT(r0, &(0x7f00000006c0)={0x7, 0x4d, 0x1}, 0x7) 03:28:30 executing program 4: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) r0 = memfd_secret(0x0) write$P9_RSTAT(r0, &(0x7f0000000040)={0x48, 0x7d, 0x1, {0x0, 0x41, 0x9, 0xf40, {0x20, 0x0, 0x8}, 0x81810000, 0x9, 0x1, 0x5, 0x7, '$[@#})&', 0x0, '', 0x5, '\\*,,)', 0x2, '.!'}}, 0x48) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x400) write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000140)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x80, 0x3, 0x3}}, 0x14) io_setup(0x4, &(0x7f00000001c0)) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) write$P9_RVERSION(r0, &(0x7f0000000280)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000002c0)={0x8, 0x40e}) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xef7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000440)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 03:28:30 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x40010, 0xffffffffffffffff, 0xa5ad3000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @initdev}, &(0x7f0000000040)=0xc) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r2 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xca0}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x1, 0x5, 0x3}, {0x0, 0x0, 0x7, 0x3f}, {0x4, 0x3, 0x1c, 0x5}, {0x3f, 0x7, 0x8c, 0x8001}, {0x6, 0x81, 0x5, 0x3ff}, {0x6, 0x20, 0x4, 0x4}, {0x2, 0x2, 0x0, 0x1000}, {0x6, 0x7, 0x0, 0x3484}, {0x1f, 0x1, 0x5, 0xa7b}, {0x6, 0x88, 0x1, 0xa00000}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x240040c0}, 0x44804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x72}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x80) getsockname(r1, &(0x7f0000000600)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, &(0x7f0000000680)=0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf4, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000000}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48d4}, 0x20048000) r8 = accept(r1, &(0x7f0000000880)=@hci, &(0x7f0000000900)=0x80) getsockname(r8, &(0x7f0000000940)=@generic, &(0x7f00000009c0)=0x80) r9 = memfd_secret(0x0) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000a40)={0x0, @phonet={0x23, 0x6c, 0x4, 0x2f}, @qipcrtr={0x2a, 0x1}, @ax25={0x3, @null, 0x8}, 0x8000, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000a00)='wg1\x00', 0x4, 0x9e1, 0x8}) r10 = socket$inet(0x2, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000ac0)={'vlan1\x00'}) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) 03:28:30 executing program 0: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x2, 0x0, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x7b4c8df1, 0x40040) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x1, 0x2, 0x5}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r2, &(0x7f0000000140)="e5d9963b2ffeb902331a9f28aac6200f47fb0b55f435501b89bd59c0ff", 0x1d) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$snapshot(r3, &(0x7f00000001c0)=""/215, 0xd7) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1001, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x77) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r6 = fsmount(r5, 0x0, 0x83) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x6, 0x0, 0x9, 0x80, 0x0, 0x20, 0x242, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000400), 0x7}, 0x24, 0x6, 0x8, 0x9, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0x10, r6, 0x2) bind$bt_sco(r6, &(0x7f00000004c0), 0x8) r7 = syz_open_dev$hiddev(&(0x7f0000000500), 0x5fc10fb5, 0xf2000) ioctl$HIDIOCSUSAGES(r7, 0x501c4814, &(0x7f0000000540)={{0x3, 0x200, 0x7f, 0x9, 0x1, 0x101}, 0x2fb, [0x7, 0x8000, 0x0, 0x5, 0x8, 0x7, 0x401, 0xbeb8, 0x4bfb380, 0x7fffffff, 0x1000, 0x2, 0x3, 0x4, 0x2, 0x6, 0x9, 0x3fe, 0x8, 0x81, 0x401, 0x6, 0x3, 0x81, 0xff, 0x4, 0x3, 0x8000, 0x0, 0x3, 0x8001, 0x3f, 0x3, 0x9af, 0x3, 0x80000001, 0x891, 0x7fffffff, 0x8, 0x81, 0x1000, 0x7, 0x0, 0x5, 0x83, 0x433, 0xffff, 0x1, 0xfe, 0x1000, 0x101, 0x0, 0x4, 0x1, 0xffff, 0x32d, 0x9, 0x20, 0xffffffff, 0x7, 0x9473048, 0x3, 0x3cba, 0x1, 0x6, 0xca8c, 0x0, 0x7, 0x5, 0x80, 0x3, 0x1, 0xfd18, 0x9, 0x0, 0x5, 0x8, 0xffff, 0x3, 0x8, 0x5, 0x3, 0x6, 0x4, 0x7, 0x7, 0xfffff001, 0x74af, 0x0, 0x80000001, 0x5, 0x9, 0x400, 0x80000001, 0x1000, 0x8, 0x7, 0xffffffb1, 0x1, 0x5, 0x1, 0x1, 0x9, 0x7fff, 0x5, 0x68e, 0x400, 0x40b, 0x61, 0x7fffffff, 0xfffff65c, 0x7, 0x800, 0x3, 0xccf6, 0x3, 0x10001, 0xc0, 0x7b8, 0x80000001, 0x5, 0x1, 0x2, 0x7fffffff, 0x1, 0x1, 0x0, 0x7fffffff, 0x30, 0xd2, 0x5, 0x9, 0x31e, 0x7, 0x9, 0x0, 0x1, 0x3f, 0x6a619927, 0x3, 0x8, 0x4, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7fffffff, 0x10000, 0x7c4, 0x0, 0x101, 0x8, 0x2, 0x0, 0x3, 0x2, 0x80000000, 0xf4eb, 0x7fffffff, 0x7, 0xfff, 0x8, 0x9f, 0x81, 0x4, 0x5, 0x3, 0xffffffa0, 0x0, 0x7f, 0x7, 0x9, 0x7, 0x3, 0x7, 0x9, 0x5, 0x1, 0x81, 0x0, 0x400000, 0x6, 0x6, 0x3, 0x2457, 0x1, 0x2, 0xc2e, 0x8, 0x2, 0x7fffffff, 0x7, 0x5, 0x0, 0x54, 0x4c, 0xffffffe1, 0x0, 0x81, 0x81, 0xfffffffd, 0xffffffff, 0x1, 0x80, 0xfffff1c8, 0x9, 0x6, 0x242aff92, 0x1, 0x3, 0xffffffff, 0x10001, 0x9, 0x2, 0x80000001, 0xffffffff, 0x1000, 0x9, 0x3ff, 0xb3af, 0x5, 0x10000, 0x8f5b, 0x4, 0x0, 0x500, 0xab61, 0x2, 0xfff, 0x200, 0x5, 0x5, 0x2, 0x7f, 0x64e42e36, 0x3f, 0x5, 0xa9, 0xfffff845, 0x100000, 0x596, 0x5, 0x9, 0x0, 0x10, 0x5, 0x0, 0x2, 0xe858, 0x1, 0x0, 0x7, 0x3, 0x6, 0x5, 0x6f85, 0x7ced, 0x7, 0x5, 0x2, 0x1, 0x8, 0x6, 0x1ff, 0x9095, 0x0, 0xfffffffe, 0x8, 0x3, 0x0, 0x7ff, 0x80, 0x854b, 0xffffffd0, 0x7, 0x3, 0x81b, 0x5, 0x6c, 0x8f, 0xfffffffc, 0x40, 0x2, 0x6, 0x401, 0x5, 0x1, 0x9, 0x1, 0x3f, 0x3, 0x100, 0x2, 0x3ff, 0x7, 0x5, 0x1, 0x8, 0x80, 0x7, 0x3ff, 0x2, 0x9, 0x4e, 0x101, 0x0, 0x1, 0x2, 0x800, 0x10001, 0x2, 0x2, 0x5, 0x3, 0x2bf8, 0x40, 0x3, 0x0, 0x1, 0x6, 0x5, 0x84db, 0x2000, 0x9c, 0x7fff, 0x3, 0x0, 0xe944, 0x6, 0x7, 0x8, 0x9, 0x7ff, 0x2, 0x9, 0x2, 0x2, 0x8, 0x0, 0x1, 0x5, 0x7fff, 0x5, 0x87, 0x602, 0x0, 0x3f, 0x3, 0x800, 0x2, 0x6, 0x3ff, 0x1f, 0xffffffff, 0x3, 0x362d, 0x0, 0x3, 0x81, 0x800, 0x212, 0x6, 0xff, 0x5, 0x8000, 0x0, 0x7, 0x5a7f, 0x5, 0x1, 0x3, 0x0, 0x4, 0x80000001, 0x3f, 0x5, 0x80000001, 0x5, 0xff, 0x2, 0x6, 0xcc, 0x10001, 0x400, 0x4147, 0x4, 0x400, 0xa0c, 0x4, 0xd430, 0x6, 0x6, 0x9, 0xccac, 0x2, 0x9, 0xeca, 0x800, 0x5, 0x9, 0x4, 0x0, 0xcf75, 0x9, 0x9, 0x7, 0x8001, 0x2, 0x1, 0x0, 0x1000, 0xfff, 0x8, 0x1, 0x3, 0x8e5, 0xffffff59, 0x738, 0x8, 0x38000, 0xb4f, 0x55e3, 0x7, 0x2, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x0, 0x3, 0x10, 0x5, 0x3, 0x3, 0x7, 0x2, 0x10000, 0x6, 0x1000, 0x1, 0x8000, 0x5, 0x3, 0x2, 0x9, 0x7, 0x8000000, 0x2, 0x1ff, 0x100, 0xbf0, 0x9, 0x40, 0x849f, 0x2, 0x81, 0x3ff, 0xfffffbff, 0x7fff, 0x7fff, 0xcb, 0x10000, 0x678, 0x100, 0xfffff801, 0x1ff, 0x72, 0x4, 0x7f, 0x4, 0x9a5d, 0x8, 0x100, 0x51af, 0x8, 0x7f, 0x7c, 0x0, 0x9, 0x5, 0x2, 0x45b5, 0x5, 0x5, 0x1, 0x8, 0xffff, 0x7, 0xfffffff7, 0x2c, 0x3ff, 0x2, 0x2, 0x8001, 0x4, 0xfff, 0x7, 0xba, 0x595, 0xffffffff, 0x7f, 0x200, 0x5, 0x0, 0x2, 0x3, 0x5, 0x5, 0x4f17, 0x7, 0x4, 0x1, 0x800, 0x7, 0xffff7fff, 0x7, 0x6, 0x6, 0x7, 0x0, 0x8, 0x101, 0xffffff00, 0xbab5, 0x6, 0x3, 0xa6, 0x8, 0x4, 0x104, 0x2c8500, 0x1, 0x7, 0x8, 0x7fffffff, 0x9, 0x81, 0x0, 0x9, 0x5, 0x5, 0x100, 0x1, 0x99b4, 0x0, 0x4, 0x100, 0x5, 0xd642, 0x52, 0xe2945d, 0x4, 0x20, 0x8, 0x1, 0x80, 0x40, 0x0, 0x399f, 0x9, 0x8, 0x6d, 0xc04, 0x3f, 0x2, 0x3, 0xa8, 0x7, 0x8, 0x8, 0x40, 0xffffffff, 0x5, 0x7fff, 0x81, 0xffffff00, 0x7fff, 0xd18, 0x2, 0x0, 0xe9, 0x7fffffff, 0x0, 0x4, 0x9, 0x401, 0xe00, 0xfffffff7, 0x7, 0x800, 0x9, 0xffffffff, 0x7, 0x4, 0x21e, 0x400, 0xfffffffd, 0xffffffff, 0x40, 0x7, 0x8, 0x6, 0x9, 0x5, 0x8, 0x2, 0x6, 0x6, 0x5, 0xd7b3, 0x20, 0x8, 0x5, 0x0, 0x7fff, 0x5, 0x5, 0x5, 0x8, 0x6, 0x2, 0xfffffff2, 0x4, 0x8, 0x1, 0xffffffff, 0x1, 0x2, 0x3, 0x4, 0x0, 0x3, 0x6, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xfffffbff, 0xffffff7f, 0x1, 0x0, 0x5f, 0x200, 0xcb, 0x6, 0x7, 0x1, 0x4, 0xcbe, 0x0, 0x3, 0xc6e9, 0x2, 0x2, 0x7fff, 0xb02, 0x46, 0x6, 0x7, 0x4, 0x6, 0x800, 0x292, 0x0, 0x800, 0x9, 0x80000000, 0x0, 0x2, 0xfd, 0xb18, 0x370d28c4, 0x9, 0xffffffff, 0x800, 0xb860, 0x3, 0x1, 0x9, 0x5, 0x4, 0x4, 0x7f, 0x4, 0x7f, 0x81, 0x8, 0xd1a9, 0x0, 0x57, 0x4, 0x3, 0x6, 0x8000, 0x0, 0x6, 0x8001, 0x0, 0xffffffff, 0xfffffffd, 0x1, 0x8, 0x3, 0x5, 0xc0000000, 0xfff, 0xac, 0x1f, 0x101, 0x3, 0x3ff, 0x1, 0x7, 0x1000, 0x80000000, 0x8, 0x0, 0x10001, 0x0, 0xd0, 0x6, 0x7, 0x3, 0x1b1e, 0x1, 0x5, 0xfffffffd, 0x0, 0x8, 0x4, 0x7fff, 0xa1a6, 0x81, 0xd407, 0x4, 0x4, 0x1f, 0x1ff, 0x5, 0xa5c, 0x2, 0x7, 0x3, 0x3, 0x4, 0x8, 0xfa, 0xc2a, 0x401, 0x8, 0x20, 0x400, 0x368dd918, 0x80000000, 0x7, 0x6103c46d, 0x2, 0x78, 0x0, 0x8, 0xe7, 0x0, 0x3, 0x80000001, 0x1ff, 0x500, 0x81, 0x7d, 0x0, 0x70000, 0x6, 0x0, 0xd1, 0xffff893f, 0x7, 0x0, 0x2, 0x1, 0xfffffeff, 0x6, 0x82, 0x5, 0x80, 0x9, 0xd6e, 0x70d5, 0x8, 0xfffffff8, 0x2, 0x80000000, 0x2, 0x10001, 0xffffffff, 0x8, 0x8, 0x40, 0xff, 0x2, 0xffffffff, 0x1c, 0x80000000, 0x8000, 0x5, 0x40, 0x10000, 0x401, 0x5, 0x6, 0x200, 0xffffffe0, 0x6, 0x6, 0x1, 0x5aa, 0x2, 0xffffffff, 0x20, 0x20eef9e0, 0x80000000, 0x9, 0x800, 0x800, 0x3, 0x2, 0x2, 0x3, 0x100, 0x3, 0x3, 0x8001, 0xab16a4d3, 0x1fff, 0x4, 0x6, 0x80000001, 0x10000, 0x2, 0x2, 0xb1f166b, 0x3, 0x8, 0x4, 0x4, 0x8, 0x7, 0xffffffff, 0xd1, 0x8, 0x6, 0x800, 0x1, 0xfff, 0xffffffff, 0x0, 0xfffffff7, 0x5, 0x8, 0x4, 0x8, 0x8, 0x7aaa30a8, 0x101, 0x8, 0x7ff, 0x9, 0x8, 0x19f, 0x3, 0xbbb6, 0x1000, 0x7ff, 0x0, 0x3ff, 0x100, 0x1, 0x9, 0x0, 0x0, 0x9, 0x88e8, 0x1, 0x453c, 0x0, 0x1, 0x400, 0x0, 0x2, 0xda, 0x7, 0x3ff, 0xfffffbff, 0x7, 0x7, 0x10000, 0x4, 0x80, 0x7fffffff, 0x9, 0x401, 0x81, 0x1ff, 0x6, 0x8, 0x5, 0x4607, 0x9, 0x7, 0xff, 0x7fffffff, 0x6, 0x400, 0x9, 0x0, 0x800, 0x7, 0x5, 0x80000001, 0x9, 0x5, 0x6, 0x8, 0x2, 0x9721, 0x9, 0x8, 0x0, 0x400, 0x200, 0x4, 0x2, 0x5, 0xffff, 0x9, 0x3f, 0x1, 0x8001, 0x8, 0x7, 0xb47, 0x9, 0x6, 0x9, 0x9, 0x5, 0x3, 0x10001, 0xffffffff, 0x4, 0x3, 0x1, 0x7, 0x200, 0x7, 0x3, 0x4, 0x1, 0x7fffffff, 0x5, 0x7f, 0x4, 0x81, 0x0, 0x200, 0x0, 0x5, 0x800, 0x4, 0x7, 0x6, 0x3, 0x9, 0x5, 0x401, 0x80000000, 0x1ff, 0xfffffffc, 0x5, 0xffffffff, 0xfff, 0x2, 0x9, 0x6, 0x1000, 0x90, 0xb391, 0x3, 0x81, 0x17, 0x0, 0x1, 0x6, 0x5, 0x4, 0xffff, 0x9, 0x3, 0xba, 0x1, 0x10001, 0xffffffff, 0x2, 0x4f43, 0x11, 0x40, 0x1000000, 0x10000, 0x9, 0x8, 0x6, 0xffffa48e, 0x0, 0x7, 0x1000, 0x7fffffff, 0x3, 0x7, 0x3, 0x4, 0x1, 0xe00, 0x3ff]}) r8 = fsmount(r6, 0x1, 0x5) read$snapshot(r8, &(0x7f0000001580)=""/94, 0x5e) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x3) 03:28:30 executing program 3: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x801, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x801, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x2012, {0x10, 0x4}, 0x4, r1, 0xee00, 0x1ff, 0x2, 0x9f61, 0x5, 0xa7, 0x6, 0x3ff, 0x1f, 0x99c0, 0x8, 0xffffffffffff5187, 0x2, 0x0, 0x1, 0x1}}, 0xa0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x11, 0xffffffffffffffff, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x4) write$9p(r2, &(0x7f0000000200)="f9a9a031e9c6d7330a1c7d7631fd7c2cdeb990da580ef35434e15f7fc64a1b034a53dec3e6bfbd08f61edcded7235e6a400caac65e72f4ef53fdd810480ef44ed2882f6bf8548217f6b8a7b8646c9eb201f6308a61f873da6b45ee98f4816c9e81ce35", 0x63) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x38, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x2}, @dead_binder_done, @exit_looper, @enter_looper, @decrefs, @decrefs={0x40046307, 0x2}, @dead_binder_done], 0xac, 0x0, &(0x7f00000002c0)="b799bfcff98c13a7bd71282828b8536f78053eb55baa53c9b4d40e3a578d3d55d2db48f403b7b6c98054e0eb84bad2fcb5edaeeaba37f6ec98b57e1454a8a1198a413fa75cd74b0265b13701a8a8657c6bdf186c84c2a42234aba88120f7fc4db65807b86c684ee445597403c11a3da9df9bf6c0fbd4676c9ce6678933b2866af584a60990392003849471a848bfa5fd04487826809d11bafbde6e825c3e86778ec05640479b3c10ed5d2272"}) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000003c0)=0x7, 0x4) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000400)={0x3, 0x2, 0x8}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x308}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x8000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x29, 0x51, 0x5, 0x7, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x54d, 0x5}}) r5 = memfd_secret(0x0) write$P9_RMKNOD(r5, &(0x7f00000007c0)={0x14, 0x13, 0x2, {0x78, 0x0, 0x5}}, 0x14) 03:28:30 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x20}, 0x8001}}, 0x18) r1 = memfd_secret(0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x1, 0x0, 0x6}}, 0x14) r2 = memfd_secret(0x0) write$P9_RWALK(r2, &(0x7f0000000140)={0x8b, 0x6f, 0x2, {0xa, [{0x1, 0x1, 0x8}, {0x2, 0x3, 0x6}, {0x2, 0x3, 0x4}, {0x80, 0x2, 0x6}, {0x10, 0x2, 0x5}, {0x0, 0x3, 0x3}, {0x10, 0x0, 0x8}, {0x80, 0x3, 0x3}, {0x80, 0x4, 0x5}, {0x4, 0x2, 0x5}]}}, 0x8b) write$P9_RLOCK(r1, &(0x7f0000000200)={0x8, 0x35, 0x2, 0x3}, 0x8) write$P9_RCLUNK(r0, &(0x7f0000000240)={0x7, 0x79, 0x1}, 0x7) r3 = fsmount(r1, 0x1, 0xe1) write$P9_RSYMLINK(r3, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x80, 0x2, 0x6}}, 0x14) write$P9_RCLUNK(r3, &(0x7f00000002c0)={0x7, 0x79, 0x1}, 0x7) write$P9_RREADDIR(r2, &(0x7f0000000300)={0xc5, 0x29, 0x1, {0x4, [{{0x8, 0x2, 0x6}, 0x400, 0x81, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x1, 0x7, 0x7, './file0'}, {{0x10, 0x2, 0x5}, 0x7, 0x9, 0x7, './file0'}, {{0x4, 0x4, 0x5}, 0x5, 0x7f, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x8, 0x20, 0x7, './file0'}, {{0x0, 0x2, 0x1}, 0x81, 0x80, 0x7, './file0'}]}}, 0xc5) write$P9_RXATTRWALK(r0, &(0x7f0000000400)={0xf, 0x1f, 0x2, 0x1f}, 0xf) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) write$P9_RGETATTR(r0, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0x1220, {0x10, 0x4, 0x2}, 0x0, r4, r5, 0x6fbd, 0x8, 0x5, 0x81, 0xf2, 0x28, 0x9, 0x7, 0x2, 0x3, 0x8000000000000, 0x6, 0x8, 0x3, 0x7}}, 0xa0) r6 = accept$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x14) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000700), &(0x7f0000000740)=0x10) 03:28:30 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLERROR(r0, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '%'}}, 0xa) write$P9_RREAD(r0, &(0x7f0000000040)={0x10a, 0x75, 0x1, {0xff, "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"}}, 0x10a) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x81, 0xf9, 0x1, 0x0, 0x68, 0x240, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100c0, 0xf1, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x30, 0x8, 0x0, 0x0, 0x8, 0x200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1400, 0x6, 0xffffffff, 0x3, 0x5, 0xff, 0x3ff, 0x0, 0x100, 0x0, 0x100000000}, 0x0, 0x7, r1, 0x4) write$P9_RLERROR(r0, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x841) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x39, 0x10601) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/93) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000500)={{0x3, 0x100, 0x1, 0xc11, 0x2, 0x81}, 0xf6, [0x8, 0x401, 0x3f, 0x1, 0x10000, 0x3, 0x1ff, 0x5, 0x101, 0x9, 0x3, 0x3, 0x6, 0x7, 0x0, 0x5, 0x100, 0x7ff, 0x7ff, 0x0, 0x7fff, 0x7, 0x0, 0x8542, 0xa, 0xfffffff9, 0x1, 0x6, 0x82, 0x7, 0x5, 0x5, 0xff, 0x2, 0x80000001, 0x0, 0x10001, 0x0, 0x3ff, 0x2, 0x5, 0x1, 0x5, 0x1, 0x1, 0xeb9f, 0x8, 0x8001, 0x4, 0x6, 0x401, 0x8, 0x1, 0x20, 0xef, 0x0, 0x200, 0x2, 0x3, 0x8, 0xfffffffd, 0x3, 0x7, 0x56, 0x9bd6, 0x7, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x14000000, 0x7fffffff, 0x7, 0x1ff, 0x56, 0x8001, 0x400, 0x4, 0x8000, 0xfff, 0x3, 0x4, 0x3ff, 0x3, 0x1, 0x1f, 0xfff, 0x200, 0x9, 0x7, 0x3c3f, 0xfff, 0x5, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0x7, 0x4, 0x6, 0x101, 0x0, 0x7, 0x7, 0x400, 0xd1, 0x10001, 0x6, 0x1, 0x100, 0x3, 0x7, 0x4, 0x7fff, 0x2, 0x5, 0xf2, 0x113d70bb, 0x3, 0xffffffff, 0x1f, 0x20, 0x6, 0x8, 0x401, 0x6, 0x7f, 0x6, 0x3f, 0x3, 0x401, 0x5, 0x1, 0x80, 0x8, 0x10000, 0x7fff, 0x1, 0x1, 0x10000, 0x9, 0x5a7e9d0f, 0x4, 0x6, 0x8, 0x100, 0x8000, 0xfffffffc, 0x371b, 0x1, 0xd0, 0x1, 0x6, 0x200, 0x1, 0x675, 0xfffff229, 0x9, 0x2, 0x5, 0x3, 0x200, 0x30000, 0x1000, 0x4, 0xfffffeff, 0x5, 0x5, 0x100, 0x7, 0x10001, 0x1, 0x8, 0x8, 0x7fffffff, 0x8, 0x6, 0x7f, 0x5, 0x8, 0x8, 0x7fff, 0x2, 0x82b, 0x8001, 0x5, 0x5, 0x1f, 0x67, 0x20, 0x0, 0x1, 0x7, 0x101, 0x3, 0x0, 0xe69, 0x800, 0x0, 0x8, 0x1ff, 0xa4e1, 0xc92, 0x3, 0xa2e6, 0xfffffbff, 0x2, 0x0, 0x3, 0x3, 0x5, 0x0, 0x6f861b8b, 0x6, 0x80000001, 0x7217e9fb, 0x1, 0x401, 0x80, 0x7a880, 0x5, 0x0, 0x72e, 0x81, 0x40, 0x1000, 0x80000001, 0x4, 0x3, 0x1f, 0x37, 0x100, 0xce9, 0x80, 0x4, 0x80, 0x0, 0x200, 0x3, 0xfff, 0x7, 0x3f, 0x3, 0x80000001, 0x7, 0x3, 0x1ef, 0xfffffffb, 0x1, 0x2e5, 0x1, 0x101, 0x9, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x8, 0xfa7e, 0x401, 0x7, 0x0, 0x8d8, 0xbe6, 0x3, 0xec, 0x1, 0x9e, 0x6, 0x3, 0x1ff, 0xd373, 0x100, 0xe7, 0x0, 0xfffffffc, 0x1, 0x61877ea5, 0x9, 0x80000000, 0x200, 0x1, 0x0, 0x6f9, 0x2, 0x7fff, 0x5, 0x1ff, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x5, 0x4, 0xd040, 0x7fffffff, 0x7, 0x1, 0x2, 0x877a, 0x4, 0x35f, 0x9, 0x2, 0x2, 0x4, 0xffffffff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0xfffffffd, 0xd6c9, 0x5, 0x6, 0x7f, 0x20, 0x4, 0x3, 0xfffffff8, 0x401, 0x8, 0x9, 0x80000000, 0x9, 0x8000, 0x1ff, 0x2, 0x400, 0x8, 0x8000, 0x75, 0x6, 0x0, 0x3, 0x800, 0x9, 0x0, 0xdae, 0x9efc, 0x67, 0x401, 0xffffe130, 0x7, 0x0, 0x0, 0x3, 0xf768, 0x2, 0x4, 0x4, 0xd335, 0x7fffffff, 0x1, 0x0, 0x40, 0x9, 0x80000000, 0x0, 0x6, 0xffffffff, 0x200, 0x1, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x1, 0x81, 0x8, 0x8, 0x8, 0x0, 0x10000, 0x40, 0x3, 0x3, 0x3d056ec0, 0x9, 0x3, 0x1ff, 0xb5, 0x2, 0x4, 0x1ff, 0xef1d, 0x1, 0x4, 0x10001, 0x7fff, 0x1, 0x100, 0xfffffffd, 0x1, 0x9, 0x6, 0xca8f, 0xffffffff, 0x400, 0x3, 0x1e3b2463, 0x101, 0x401, 0x3f, 0x42c, 0x4, 0x10001, 0x62d, 0x0, 0x20, 0x5, 0x10000, 0x9, 0x1, 0xe123, 0x2, 0x1, 0xffff8000, 0x8, 0x3, 0x8001, 0xff, 0x3, 0x401, 0x100, 0x8000, 0x9, 0xcfc, 0xfffffffe, 0x8001, 0x4, 0xffff, 0xb9, 0x7, 0x0, 0x4, 0x1000, 0x1, 0x7ff, 0x7, 0x1, 0x0, 0xaff, 0x2, 0x8da, 0x99e, 0x0, 0x0, 0x5, 0x3, 0x20, 0x3f, 0x4, 0x3ff, 0x0, 0xeb76, 0x106, 0x1, 0x3, 0x80, 0x6, 0x9, 0x5, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x5, 0x1ff, 0x763, 0x80000000, 0xc, 0xe9, 0x3f, 0x1, 0xd7d2, 0x0, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x14, 0x2, 0x1, 0x3, 0xff, 0x80000001, 0xb7, 0x2e, 0x6, 0x61b, 0x3, 0x0, 0x3, 0x8001, 0x8, 0x5, 0xb2c, 0x101, 0x200, 0x3f, 0x7fff, 0x3, 0x2, 0x10000, 0x400, 0x2c, 0xcb5d, 0x7, 0x96c, 0x2, 0x7fff, 0x0, 0x80, 0x6, 0x5, 0x0, 0xf192, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x9, 0xd7fd, 0x4, 0x7, 0x5, 0x945, 0xfffffffc, 0x1, 0xfffff48a, 0x5, 0x5, 0xe0, 0x4, 0x3, 0x9, 0x80000000, 0x1f, 0x200, 0x0, 0xd8b, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0xffffffff, 0xffff, 0x401, 0x5, 0x4, 0x7fffffff, 0x8, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x0, 0xddd3, 0x2, 0x400000, 0x8, 0x40, 0x5d96, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x0, 0xc92, 0x100, 0x5, 0x6, 0x4, 0x9, 0x6, 0x101, 0x7, 0x7fff, 0x36e, 0x20, 0x20, 0x100, 0x200, 0xd874, 0x2, 0x20000, 0xd3, 0x8001, 0x3fc000, 0x3, 0x5, 0x40, 0x5, 0x4, 0x0, 0x9, 0x9, 0xff8, 0x7fff, 0x6, 0x1, 0x80000000, 0x8, 0x9, 0xf0, 0x200, 0x9, 0x10001, 0x0, 0x4d, 0x8000, 0xcd60, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x1f, 0x8, 0xfffffff8, 0x4, 0x6, 0x0, 0x5, 0x400, 0x4, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7f, 0xad9, 0x1, 0x7, 0x8000, 0x6, 0x2, 0x100, 0x9, 0x4, 0x1f, 0x200, 0x7, 0x2, 0x8, 0x7, 0x0, 0x8, 0x8, 0x40, 0xffffffff, 0x8, 0xfffffffc, 0x9, 0x8, 0x1, 0x8, 0xf7c, 0x9, 0x0, 0x2, 0x3, 0x10001, 0x97, 0x6, 0x9, 0x40, 0x7fff, 0xfffffff7, 0x463, 0x3, 0x2, 0x9, 0x15, 0x6, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0xe5e, 0x7f, 0x8, 0x4, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x1000, 0x7ff, 0x7, 0x3f, 0xff, 0x7, 0x4592, 0x1, 0x4, 0x2, 0x91f, 0x8, 0x4, 0x1, 0x100, 0x6cc6e587, 0xfffeffff, 0x8, 0x3f, 0x6, 0x5, 0x10001, 0x80000000, 0x4, 0x4, 0x8, 0x4, 0x8, 0x8, 0x6, 0xffff7a04, 0x9, 0xe1f, 0x0, 0x7, 0x9, 0x1ff, 0x400, 0x800, 0x3, 0x8001, 0x9, 0x4, 0x0, 0x5, 0xfff, 0x5, 0x9, 0x9, 0xf4, 0xff, 0x9, 0x83, 0x1, 0x7fffffff, 0x800, 0x401, 0xe68, 0x1a, 0x8000, 0xffff, 0x368, 0x5, 0x4, 0x3, 0x7, 0x9, 0x6d, 0x1, 0x9, 0xe2, 0x3, 0x0, 0x9, 0x0, 0x10001, 0x4a6909f, 0x1c, 0x6, 0x9, 0x560, 0x6, 0x10001, 0x1f7, 0x705, 0x5, 0x1435, 0x2, 0x6, 0x1ff, 0x20, 0xfffffff8, 0x4, 0x1, 0x100, 0xfffffffa, 0x9, 0x40, 0xfffffff9, 0x4, 0x9, 0x81, 0x6f5f, 0x81, 0xff, 0x7, 0x0, 0x4, 0x5, 0x8, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x0, 0x4, 0x3, 0x512, 0x7, 0x40, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0xffffed81, 0x7, 0x7, 0x1, 0x3, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x2, 0x2, 0x9, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4454, 0x6, 0x40dc, 0x8, 0x99ad, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5, 0xdfda, 0x0, 0x100, 0x2, 0x8, 0x37800000, 0x1, 0x1, 0x81, 0xc94c, 0x5, 0x80, 0x20, 0x7, 0x4, 0x3, 0x8, 0x711, 0x3e, 0x200, 0x6, 0x4b, 0x1f, 0x8, 0x2, 0x101, 0xd2c, 0x62fd1a7, 0x0, 0x9, 0x2, 0x1, 0x9, 0x0, 0x6ea, 0x6, 0x20, 0x8, 0xfffffff9, 0x8000, 0x20, 0x720f, 0x4, 0x4, 0x2, 0x1000, 0x5587, 0x800, 0xffff, 0xc30, 0x5, 0x7, 0x4, 0x8, 0x3c6e, 0x36000000, 0x1, 0x10, 0x800, 0x7, 0xebc7, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7, 0x7, 0x9, 0xffffffff, 0x0, 0x7f, 0x101, 0x1, 0x700, 0xf4a, 0x5, 0x3, 0x40, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x20, 0x6, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x5, 0x5, 0x6, 0x0, 0x7, 0x19, 0x9, 0x1f, 0x9, 0x800, 0x6, 0x9, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x33, 0x0, 0x80000001, 0xdd, 0xffff, 0x80000001, 0x1, 0x8, 0x2, 0x8, 0x8, 0x1, 0x1, 0x401, 0xffffffc0, 0x8, 0x8, 0xffffd848, 0x2]}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001540)={0x43, 0x9, 0x2, {0x8, 0x3, 0xffffffff, 0x4, 0x7f, 0x7f, 0x80, 0x8, 0xc642}}, 0x43) write$P9_RATTACH(r1, &(0x7f00000015c0)={0x14, 0x69, 0x2, {0x1, 0x0, 0x6}}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001600)={'gretap0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840)={0x0, @multicast1, @multicast2}, &(0x7f0000001880)=0xc) 03:28:30 executing program 0: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x2, 0x0, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x7b4c8df1, 0x40040) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x1, 0x2, 0x5}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r2, &(0x7f0000000140)="e5d9963b2ffeb902331a9f28aac6200f47fb0b55f435501b89bd59c0ff", 0x1d) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$snapshot(r3, &(0x7f00000001c0)=""/215, 0xd7) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1001, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x77) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r6 = fsmount(r5, 0x0, 0x83) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x6, 0x0, 0x9, 0x80, 0x0, 0x20, 0x242, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000400), 0x7}, 0x24, 0x6, 0x8, 0x9, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0x10, r6, 0x2) bind$bt_sco(r6, &(0x7f00000004c0), 0x8) r7 = syz_open_dev$hiddev(&(0x7f0000000500), 0x5fc10fb5, 0xf2000) ioctl$HIDIOCSUSAGES(r7, 0x501c4814, &(0x7f0000000540)={{0x3, 0x200, 0x7f, 0x9, 0x1, 0x101}, 0x2fb, [0x7, 0x8000, 0x0, 0x5, 0x8, 0x7, 0x401, 0xbeb8, 0x4bfb380, 0x7fffffff, 0x1000, 0x2, 0x3, 0x4, 0x2, 0x6, 0x9, 0x3fe, 0x8, 0x81, 0x401, 0x6, 0x3, 0x81, 0xff, 0x4, 0x3, 0x8000, 0x0, 0x3, 0x8001, 0x3f, 0x3, 0x9af, 0x3, 0x80000001, 0x891, 0x7fffffff, 0x8, 0x81, 0x1000, 0x7, 0x0, 0x5, 0x83, 0x433, 0xffff, 0x1, 0xfe, 0x1000, 0x101, 0x0, 0x4, 0x1, 0xffff, 0x32d, 0x9, 0x20, 0xffffffff, 0x7, 0x9473048, 0x3, 0x3cba, 0x1, 0x6, 0xca8c, 0x0, 0x7, 0x5, 0x80, 0x3, 0x1, 0xfd18, 0x9, 0x0, 0x5, 0x8, 0xffff, 0x3, 0x8, 0x5, 0x3, 0x6, 0x4, 0x7, 0x7, 0xfffff001, 0x74af, 0x0, 0x80000001, 0x5, 0x9, 0x400, 0x80000001, 0x1000, 0x8, 0x7, 0xffffffb1, 0x1, 0x5, 0x1, 0x1, 0x9, 0x7fff, 0x5, 0x68e, 0x400, 0x40b, 0x61, 0x7fffffff, 0xfffff65c, 0x7, 0x800, 0x3, 0xccf6, 0x3, 0x10001, 0xc0, 0x7b8, 0x80000001, 0x5, 0x1, 0x2, 0x7fffffff, 0x1, 0x1, 0x0, 0x7fffffff, 0x30, 0xd2, 0x5, 0x9, 0x31e, 0x7, 0x9, 0x0, 0x1, 0x3f, 0x6a619927, 0x3, 0x8, 0x4, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7fffffff, 0x10000, 0x7c4, 0x0, 0x101, 0x8, 0x2, 0x0, 0x3, 0x2, 0x80000000, 0xf4eb, 0x7fffffff, 0x7, 0xfff, 0x8, 0x9f, 0x81, 0x4, 0x5, 0x3, 0xffffffa0, 0x0, 0x7f, 0x7, 0x9, 0x7, 0x3, 0x7, 0x9, 0x5, 0x1, 0x81, 0x0, 0x400000, 0x6, 0x6, 0x3, 0x2457, 0x1, 0x2, 0xc2e, 0x8, 0x2, 0x7fffffff, 0x7, 0x5, 0x0, 0x54, 0x4c, 0xffffffe1, 0x0, 0x81, 0x81, 0xfffffffd, 0xffffffff, 0x1, 0x80, 0xfffff1c8, 0x9, 0x6, 0x242aff92, 0x1, 0x3, 0xffffffff, 0x10001, 0x9, 0x2, 0x80000001, 0xffffffff, 0x1000, 0x9, 0x3ff, 0xb3af, 0x5, 0x10000, 0x8f5b, 0x4, 0x0, 0x500, 0xab61, 0x2, 0xfff, 0x200, 0x5, 0x5, 0x2, 0x7f, 0x64e42e36, 0x3f, 0x5, 0xa9, 0xfffff845, 0x100000, 0x596, 0x5, 0x9, 0x0, 0x10, 0x5, 0x0, 0x2, 0xe858, 0x1, 0x0, 0x7, 0x3, 0x6, 0x5, 0x6f85, 0x7ced, 0x7, 0x5, 0x2, 0x1, 0x8, 0x6, 0x1ff, 0x9095, 0x0, 0xfffffffe, 0x8, 0x3, 0x0, 0x7ff, 0x80, 0x854b, 0xffffffd0, 0x7, 0x3, 0x81b, 0x5, 0x6c, 0x8f, 0xfffffffc, 0x40, 0x2, 0x6, 0x401, 0x5, 0x1, 0x9, 0x1, 0x3f, 0x3, 0x100, 0x2, 0x3ff, 0x7, 0x5, 0x1, 0x8, 0x80, 0x7, 0x3ff, 0x2, 0x9, 0x4e, 0x101, 0x0, 0x1, 0x2, 0x800, 0x10001, 0x2, 0x2, 0x5, 0x3, 0x2bf8, 0x40, 0x3, 0x0, 0x1, 0x6, 0x5, 0x84db, 0x2000, 0x9c, 0x7fff, 0x3, 0x0, 0xe944, 0x6, 0x7, 0x8, 0x9, 0x7ff, 0x2, 0x9, 0x2, 0x2, 0x8, 0x0, 0x1, 0x5, 0x7fff, 0x5, 0x87, 0x602, 0x0, 0x3f, 0x3, 0x800, 0x2, 0x6, 0x3ff, 0x1f, 0xffffffff, 0x3, 0x362d, 0x0, 0x3, 0x81, 0x800, 0x212, 0x6, 0xff, 0x5, 0x8000, 0x0, 0x7, 0x5a7f, 0x5, 0x1, 0x3, 0x0, 0x4, 0x80000001, 0x3f, 0x5, 0x80000001, 0x5, 0xff, 0x2, 0x6, 0xcc, 0x10001, 0x400, 0x4147, 0x4, 0x400, 0xa0c, 0x4, 0xd430, 0x6, 0x6, 0x9, 0xccac, 0x2, 0x9, 0xeca, 0x800, 0x5, 0x9, 0x4, 0x0, 0xcf75, 0x9, 0x9, 0x7, 0x8001, 0x2, 0x1, 0x0, 0x1000, 0xfff, 0x8, 0x1, 0x3, 0x8e5, 0xffffff59, 0x738, 0x8, 0x38000, 0xb4f, 0x55e3, 0x7, 0x2, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x0, 0x3, 0x10, 0x5, 0x3, 0x3, 0x7, 0x2, 0x10000, 0x6, 0x1000, 0x1, 0x8000, 0x5, 0x3, 0x2, 0x9, 0x7, 0x8000000, 0x2, 0x1ff, 0x100, 0xbf0, 0x9, 0x40, 0x849f, 0x2, 0x81, 0x3ff, 0xfffffbff, 0x7fff, 0x7fff, 0xcb, 0x10000, 0x678, 0x100, 0xfffff801, 0x1ff, 0x72, 0x4, 0x7f, 0x4, 0x9a5d, 0x8, 0x100, 0x51af, 0x8, 0x7f, 0x7c, 0x0, 0x9, 0x5, 0x2, 0x45b5, 0x5, 0x5, 0x1, 0x8, 0xffff, 0x7, 0xfffffff7, 0x2c, 0x3ff, 0x2, 0x2, 0x8001, 0x4, 0xfff, 0x7, 0xba, 0x595, 0xffffffff, 0x7f, 0x200, 0x5, 0x0, 0x2, 0x3, 0x5, 0x5, 0x4f17, 0x7, 0x4, 0x1, 0x800, 0x7, 0xffff7fff, 0x7, 0x6, 0x6, 0x7, 0x0, 0x8, 0x101, 0xffffff00, 0xbab5, 0x6, 0x3, 0xa6, 0x8, 0x4, 0x104, 0x2c8500, 0x1, 0x7, 0x8, 0x7fffffff, 0x9, 0x81, 0x0, 0x9, 0x5, 0x5, 0x100, 0x1, 0x99b4, 0x0, 0x4, 0x100, 0x5, 0xd642, 0x52, 0xe2945d, 0x4, 0x20, 0x8, 0x1, 0x80, 0x40, 0x0, 0x399f, 0x9, 0x8, 0x6d, 0xc04, 0x3f, 0x2, 0x3, 0xa8, 0x7, 0x8, 0x8, 0x40, 0xffffffff, 0x5, 0x7fff, 0x81, 0xffffff00, 0x7fff, 0xd18, 0x2, 0x0, 0xe9, 0x7fffffff, 0x0, 0x4, 0x9, 0x401, 0xe00, 0xfffffff7, 0x7, 0x800, 0x9, 0xffffffff, 0x7, 0x4, 0x21e, 0x400, 0xfffffffd, 0xffffffff, 0x40, 0x7, 0x8, 0x6, 0x9, 0x5, 0x8, 0x2, 0x6, 0x6, 0x5, 0xd7b3, 0x20, 0x8, 0x5, 0x0, 0x7fff, 0x5, 0x5, 0x5, 0x8, 0x6, 0x2, 0xfffffff2, 0x4, 0x8, 0x1, 0xffffffff, 0x1, 0x2, 0x3, 0x4, 0x0, 0x3, 0x6, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xfffffbff, 0xffffff7f, 0x1, 0x0, 0x5f, 0x200, 0xcb, 0x6, 0x7, 0x1, 0x4, 0xcbe, 0x0, 0x3, 0xc6e9, 0x2, 0x2, 0x7fff, 0xb02, 0x46, 0x6, 0x7, 0x4, 0x6, 0x800, 0x292, 0x0, 0x800, 0x9, 0x80000000, 0x0, 0x2, 0xfd, 0xb18, 0x370d28c4, 0x9, 0xffffffff, 0x800, 0xb860, 0x3, 0x1, 0x9, 0x5, 0x4, 0x4, 0x7f, 0x4, 0x7f, 0x81, 0x8, 0xd1a9, 0x0, 0x57, 0x4, 0x3, 0x6, 0x8000, 0x0, 0x6, 0x8001, 0x0, 0xffffffff, 0xfffffffd, 0x1, 0x8, 0x3, 0x5, 0xc0000000, 0xfff, 0xac, 0x1f, 0x101, 0x3, 0x3ff, 0x1, 0x7, 0x1000, 0x80000000, 0x8, 0x0, 0x10001, 0x0, 0xd0, 0x6, 0x7, 0x3, 0x1b1e, 0x1, 0x5, 0xfffffffd, 0x0, 0x8, 0x4, 0x7fff, 0xa1a6, 0x81, 0xd407, 0x4, 0x4, 0x1f, 0x1ff, 0x5, 0xa5c, 0x2, 0x7, 0x3, 0x3, 0x4, 0x8, 0xfa, 0xc2a, 0x401, 0x8, 0x20, 0x400, 0x368dd918, 0x80000000, 0x7, 0x6103c46d, 0x2, 0x78, 0x0, 0x8, 0xe7, 0x0, 0x3, 0x80000001, 0x1ff, 0x500, 0x81, 0x7d, 0x0, 0x70000, 0x6, 0x0, 0xd1, 0xffff893f, 0x7, 0x0, 0x2, 0x1, 0xfffffeff, 0x6, 0x82, 0x5, 0x80, 0x9, 0xd6e, 0x70d5, 0x8, 0xfffffff8, 0x2, 0x80000000, 0x2, 0x10001, 0xffffffff, 0x8, 0x8, 0x40, 0xff, 0x2, 0xffffffff, 0x1c, 0x80000000, 0x8000, 0x5, 0x40, 0x10000, 0x401, 0x5, 0x6, 0x200, 0xffffffe0, 0x6, 0x6, 0x1, 0x5aa, 0x2, 0xffffffff, 0x20, 0x20eef9e0, 0x80000000, 0x9, 0x800, 0x800, 0x3, 0x2, 0x2, 0x3, 0x100, 0x3, 0x3, 0x8001, 0xab16a4d3, 0x1fff, 0x4, 0x6, 0x80000001, 0x10000, 0x2, 0x2, 0xb1f166b, 0x3, 0x8, 0x4, 0x4, 0x8, 0x7, 0xffffffff, 0xd1, 0x8, 0x6, 0x800, 0x1, 0xfff, 0xffffffff, 0x0, 0xfffffff7, 0x5, 0x8, 0x4, 0x8, 0x8, 0x7aaa30a8, 0x101, 0x8, 0x7ff, 0x9, 0x8, 0x19f, 0x3, 0xbbb6, 0x1000, 0x7ff, 0x0, 0x3ff, 0x100, 0x1, 0x9, 0x0, 0x0, 0x9, 0x88e8, 0x1, 0x453c, 0x0, 0x1, 0x400, 0x0, 0x2, 0xda, 0x7, 0x3ff, 0xfffffbff, 0x7, 0x7, 0x10000, 0x4, 0x80, 0x7fffffff, 0x9, 0x401, 0x81, 0x1ff, 0x6, 0x8, 0x5, 0x4607, 0x9, 0x7, 0xff, 0x7fffffff, 0x6, 0x400, 0x9, 0x0, 0x800, 0x7, 0x5, 0x80000001, 0x9, 0x5, 0x6, 0x8, 0x2, 0x9721, 0x9, 0x8, 0x0, 0x400, 0x200, 0x4, 0x2, 0x5, 0xffff, 0x9, 0x3f, 0x1, 0x8001, 0x8, 0x7, 0xb47, 0x9, 0x6, 0x9, 0x9, 0x5, 0x3, 0x10001, 0xffffffff, 0x4, 0x3, 0x1, 0x7, 0x200, 0x7, 0x3, 0x4, 0x1, 0x7fffffff, 0x5, 0x7f, 0x4, 0x81, 0x0, 0x200, 0x0, 0x5, 0x800, 0x4, 0x7, 0x6, 0x3, 0x9, 0x5, 0x401, 0x80000000, 0x1ff, 0xfffffffc, 0x5, 0xffffffff, 0xfff, 0x2, 0x9, 0x6, 0x1000, 0x90, 0xb391, 0x3, 0x81, 0x17, 0x0, 0x1, 0x6, 0x5, 0x4, 0xffff, 0x9, 0x3, 0xba, 0x1, 0x10001, 0xffffffff, 0x2, 0x4f43, 0x11, 0x40, 0x1000000, 0x10000, 0x9, 0x8, 0x6, 0xffffa48e, 0x0, 0x7, 0x1000, 0x7fffffff, 0x3, 0x7, 0x3, 0x4, 0x1, 0xe00, 0x3ff]}) r8 = fsmount(r6, 0x1, 0x5) read$snapshot(r8, &(0x7f0000001580)=""/94, 0x5e) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x3) 03:28:30 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x20}, 0x8001}}, 0x18) r1 = memfd_secret(0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x1, 0x0, 0x6}}, 0x14) r2 = memfd_secret(0x0) write$P9_RWALK(r2, &(0x7f0000000140)={0x8b, 0x6f, 0x2, {0xa, [{0x1, 0x1, 0x8}, {0x2, 0x3, 0x6}, {0x2, 0x3, 0x4}, {0x80, 0x2, 0x6}, {0x10, 0x2, 0x5}, {0x0, 0x3, 0x3}, {0x10, 0x0, 0x8}, {0x80, 0x3, 0x3}, {0x80, 0x4, 0x5}, {0x4, 0x2, 0x5}]}}, 0x8b) write$P9_RLOCK(r1, &(0x7f0000000200)={0x8, 0x35, 0x2, 0x3}, 0x8) write$P9_RCLUNK(r0, &(0x7f0000000240)={0x7, 0x79, 0x1}, 0x7) r3 = fsmount(r1, 0x1, 0xe1) write$P9_RSYMLINK(r3, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x80, 0x2, 0x6}}, 0x14) write$P9_RCLUNK(r3, &(0x7f00000002c0)={0x7, 0x79, 0x1}, 0x7) write$P9_RREADDIR(r2, &(0x7f0000000300)={0xc5, 0x29, 0x1, {0x4, [{{0x8, 0x2, 0x6}, 0x400, 0x81, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x1, 0x7, 0x7, './file0'}, {{0x10, 0x2, 0x5}, 0x7, 0x9, 0x7, './file0'}, {{0x4, 0x4, 0x5}, 0x5, 0x7f, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x8, 0x20, 0x7, './file0'}, {{0x0, 0x2, 0x1}, 0x81, 0x80, 0x7, './file0'}]}}, 0xc5) write$P9_RXATTRWALK(r0, &(0x7f0000000400)={0xf, 0x1f, 0x2, 0x1f}, 0xf) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) write$P9_RGETATTR(r0, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0x1220, {0x10, 0x4, 0x2}, 0x0, r4, r5, 0x6fbd, 0x8, 0x5, 0x81, 0xf2, 0x28, 0x9, 0x7, 0x2, 0x3, 0x8000000000000, 0x6, 0x8, 0x3, 0x7}}, 0xa0) r6 = accept$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x14) getsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000700), &(0x7f0000000740)=0x10) 03:28:30 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLERROR(r0, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '%'}}, 0xa) write$P9_RREAD(r0, &(0x7f0000000040)={0x10a, 0x75, 0x1, {0xff, "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"}}, 0x10a) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x81, 0xf9, 0x1, 0x0, 0x68, 0x240, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100c0, 0xf1, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x30, 0x8, 0x0, 0x0, 0x8, 0x200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1400, 0x6, 0xffffffff, 0x3, 0x5, 0xff, 0x3ff, 0x0, 0x100, 0x0, 0x100000000}, 0x0, 0x7, r1, 0x4) write$P9_RLERROR(r0, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x841) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x39, 0x10601) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/93) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000500)={{0x3, 0x100, 0x1, 0xc11, 0x2, 0x81}, 0xf6, [0x8, 0x401, 0x3f, 0x1, 0x10000, 0x3, 0x1ff, 0x5, 0x101, 0x9, 0x3, 0x3, 0x6, 0x7, 0x0, 0x5, 0x100, 0x7ff, 0x7ff, 0x0, 0x7fff, 0x7, 0x0, 0x8542, 0xa, 0xfffffff9, 0x1, 0x6, 0x82, 0x7, 0x5, 0x5, 0xff, 0x2, 0x80000001, 0x0, 0x10001, 0x0, 0x3ff, 0x2, 0x5, 0x1, 0x5, 0x1, 0x1, 0xeb9f, 0x8, 0x8001, 0x4, 0x6, 0x401, 0x8, 0x1, 0x20, 0xef, 0x0, 0x200, 0x2, 0x3, 0x8, 0xfffffffd, 0x3, 0x7, 0x56, 0x9bd6, 0x7, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x14000000, 0x7fffffff, 0x7, 0x1ff, 0x56, 0x8001, 0x400, 0x4, 0x8000, 0xfff, 0x3, 0x4, 0x3ff, 0x3, 0x1, 0x1f, 0xfff, 0x200, 0x9, 0x7, 0x3c3f, 0xfff, 0x5, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0x7, 0x4, 0x6, 0x101, 0x0, 0x7, 0x7, 0x400, 0xd1, 0x10001, 0x6, 0x1, 0x100, 0x3, 0x7, 0x4, 0x7fff, 0x2, 0x5, 0xf2, 0x113d70bb, 0x3, 0xffffffff, 0x1f, 0x20, 0x6, 0x8, 0x401, 0x6, 0x7f, 0x6, 0x3f, 0x3, 0x401, 0x5, 0x1, 0x80, 0x8, 0x10000, 0x7fff, 0x1, 0x1, 0x10000, 0x9, 0x5a7e9d0f, 0x4, 0x6, 0x8, 0x100, 0x8000, 0xfffffffc, 0x371b, 0x1, 0xd0, 0x1, 0x6, 0x200, 0x1, 0x675, 0xfffff229, 0x9, 0x2, 0x5, 0x3, 0x200, 0x30000, 0x1000, 0x4, 0xfffffeff, 0x5, 0x5, 0x100, 0x7, 0x10001, 0x1, 0x8, 0x8, 0x7fffffff, 0x8, 0x6, 0x7f, 0x5, 0x8, 0x8, 0x7fff, 0x2, 0x82b, 0x8001, 0x5, 0x5, 0x1f, 0x67, 0x20, 0x0, 0x1, 0x7, 0x101, 0x3, 0x0, 0xe69, 0x800, 0x0, 0x8, 0x1ff, 0xa4e1, 0xc92, 0x3, 0xa2e6, 0xfffffbff, 0x2, 0x0, 0x3, 0x3, 0x5, 0x0, 0x6f861b8b, 0x6, 0x80000001, 0x7217e9fb, 0x1, 0x401, 0x80, 0x7a880, 0x5, 0x0, 0x72e, 0x81, 0x40, 0x1000, 0x80000001, 0x4, 0x3, 0x1f, 0x37, 0x100, 0xce9, 0x80, 0x4, 0x80, 0x0, 0x200, 0x3, 0xfff, 0x7, 0x3f, 0x3, 0x80000001, 0x7, 0x3, 0x1ef, 0xfffffffb, 0x1, 0x2e5, 0x1, 0x101, 0x9, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x8, 0xfa7e, 0x401, 0x7, 0x0, 0x8d8, 0xbe6, 0x3, 0xec, 0x1, 0x9e, 0x6, 0x3, 0x1ff, 0xd373, 0x100, 0xe7, 0x0, 0xfffffffc, 0x1, 0x61877ea5, 0x9, 0x80000000, 0x200, 0x1, 0x0, 0x6f9, 0x2, 0x7fff, 0x5, 0x1ff, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x5, 0x4, 0xd040, 0x7fffffff, 0x7, 0x1, 0x2, 0x877a, 0x4, 0x35f, 0x9, 0x2, 0x2, 0x4, 0xffffffff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0xfffffffd, 0xd6c9, 0x5, 0x6, 0x7f, 0x20, 0x4, 0x3, 0xfffffff8, 0x401, 0x8, 0x9, 0x80000000, 0x9, 0x8000, 0x1ff, 0x2, 0x400, 0x8, 0x8000, 0x75, 0x6, 0x0, 0x3, 0x800, 0x9, 0x0, 0xdae, 0x9efc, 0x67, 0x401, 0xffffe130, 0x7, 0x0, 0x0, 0x3, 0xf768, 0x2, 0x4, 0x4, 0xd335, 0x7fffffff, 0x1, 0x0, 0x40, 0x9, 0x80000000, 0x0, 0x6, 0xffffffff, 0x200, 0x1, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x1, 0x81, 0x8, 0x8, 0x8, 0x0, 0x10000, 0x40, 0x3, 0x3, 0x3d056ec0, 0x9, 0x3, 0x1ff, 0xb5, 0x2, 0x4, 0x1ff, 0xef1d, 0x1, 0x4, 0x10001, 0x7fff, 0x1, 0x100, 0xfffffffd, 0x1, 0x9, 0x6, 0xca8f, 0xffffffff, 0x400, 0x3, 0x1e3b2463, 0x101, 0x401, 0x3f, 0x42c, 0x4, 0x10001, 0x62d, 0x0, 0x20, 0x5, 0x10000, 0x9, 0x1, 0xe123, 0x2, 0x1, 0xffff8000, 0x8, 0x3, 0x8001, 0xff, 0x3, 0x401, 0x100, 0x8000, 0x9, 0xcfc, 0xfffffffe, 0x8001, 0x4, 0xffff, 0xb9, 0x7, 0x0, 0x4, 0x1000, 0x1, 0x7ff, 0x7, 0x1, 0x0, 0xaff, 0x2, 0x8da, 0x99e, 0x0, 0x0, 0x5, 0x3, 0x20, 0x3f, 0x4, 0x3ff, 0x0, 0xeb76, 0x106, 0x1, 0x3, 0x80, 0x6, 0x9, 0x5, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x5, 0x1ff, 0x763, 0x80000000, 0xc, 0xe9, 0x3f, 0x1, 0xd7d2, 0x0, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x14, 0x2, 0x1, 0x3, 0xff, 0x80000001, 0xb7, 0x2e, 0x6, 0x61b, 0x3, 0x0, 0x3, 0x8001, 0x8, 0x5, 0xb2c, 0x101, 0x200, 0x3f, 0x7fff, 0x3, 0x2, 0x10000, 0x400, 0x2c, 0xcb5d, 0x7, 0x96c, 0x2, 0x7fff, 0x0, 0x80, 0x6, 0x5, 0x0, 0xf192, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x9, 0xd7fd, 0x4, 0x7, 0x5, 0x945, 0xfffffffc, 0x1, 0xfffff48a, 0x5, 0x5, 0xe0, 0x4, 0x3, 0x9, 0x80000000, 0x1f, 0x200, 0x0, 0xd8b, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0xffffffff, 0xffff, 0x401, 0x5, 0x4, 0x7fffffff, 0x8, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x0, 0xddd3, 0x2, 0x400000, 0x8, 0x40, 0x5d96, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x0, 0xc92, 0x100, 0x5, 0x6, 0x4, 0x9, 0x6, 0x101, 0x7, 0x7fff, 0x36e, 0x20, 0x20, 0x100, 0x200, 0xd874, 0x2, 0x20000, 0xd3, 0x8001, 0x3fc000, 0x3, 0x5, 0x40, 0x5, 0x4, 0x0, 0x9, 0x9, 0xff8, 0x7fff, 0x6, 0x1, 0x80000000, 0x8, 0x9, 0xf0, 0x200, 0x9, 0x10001, 0x0, 0x4d, 0x8000, 0xcd60, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x1f, 0x8, 0xfffffff8, 0x4, 0x6, 0x0, 0x5, 0x400, 0x4, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7f, 0xad9, 0x1, 0x7, 0x8000, 0x6, 0x2, 0x100, 0x9, 0x4, 0x1f, 0x200, 0x7, 0x2, 0x8, 0x7, 0x0, 0x8, 0x8, 0x40, 0xffffffff, 0x8, 0xfffffffc, 0x9, 0x8, 0x1, 0x8, 0xf7c, 0x9, 0x0, 0x2, 0x3, 0x10001, 0x97, 0x6, 0x9, 0x40, 0x7fff, 0xfffffff7, 0x463, 0x3, 0x2, 0x9, 0x15, 0x6, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0xe5e, 0x7f, 0x8, 0x4, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x1000, 0x7ff, 0x7, 0x3f, 0xff, 0x7, 0x4592, 0x1, 0x4, 0x2, 0x91f, 0x8, 0x4, 0x1, 0x100, 0x6cc6e587, 0xfffeffff, 0x8, 0x3f, 0x6, 0x5, 0x10001, 0x80000000, 0x4, 0x4, 0x8, 0x4, 0x8, 0x8, 0x6, 0xffff7a04, 0x9, 0xe1f, 0x0, 0x7, 0x9, 0x1ff, 0x400, 0x800, 0x3, 0x8001, 0x9, 0x4, 0x0, 0x5, 0xfff, 0x5, 0x9, 0x9, 0xf4, 0xff, 0x9, 0x83, 0x1, 0x7fffffff, 0x800, 0x401, 0xe68, 0x1a, 0x8000, 0xffff, 0x368, 0x5, 0x4, 0x3, 0x7, 0x9, 0x6d, 0x1, 0x9, 0xe2, 0x3, 0x0, 0x9, 0x0, 0x10001, 0x4a6909f, 0x1c, 0x6, 0x9, 0x560, 0x6, 0x10001, 0x1f7, 0x705, 0x5, 0x1435, 0x2, 0x6, 0x1ff, 0x20, 0xfffffff8, 0x4, 0x1, 0x100, 0xfffffffa, 0x9, 0x40, 0xfffffff9, 0x4, 0x9, 0x81, 0x6f5f, 0x81, 0xff, 0x7, 0x0, 0x4, 0x5, 0x8, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x0, 0x4, 0x3, 0x512, 0x7, 0x40, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0xffffed81, 0x7, 0x7, 0x1, 0x3, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x2, 0x2, 0x9, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4454, 0x6, 0x40dc, 0x8, 0x99ad, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5, 0xdfda, 0x0, 0x100, 0x2, 0x8, 0x37800000, 0x1, 0x1, 0x81, 0xc94c, 0x5, 0x80, 0x20, 0x7, 0x4, 0x3, 0x8, 0x711, 0x3e, 0x200, 0x6, 0x4b, 0x1f, 0x8, 0x2, 0x101, 0xd2c, 0x62fd1a7, 0x0, 0x9, 0x2, 0x1, 0x9, 0x0, 0x6ea, 0x6, 0x20, 0x8, 0xfffffff9, 0x8000, 0x20, 0x720f, 0x4, 0x4, 0x2, 0x1000, 0x5587, 0x800, 0xffff, 0xc30, 0x5, 0x7, 0x4, 0x8, 0x3c6e, 0x36000000, 0x1, 0x10, 0x800, 0x7, 0xebc7, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7, 0x7, 0x9, 0xffffffff, 0x0, 0x7f, 0x101, 0x1, 0x700, 0xf4a, 0x5, 0x3, 0x40, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x20, 0x6, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x5, 0x5, 0x6, 0x0, 0x7, 0x19, 0x9, 0x1f, 0x9, 0x800, 0x6, 0x9, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x33, 0x0, 0x80000001, 0xdd, 0xffff, 0x80000001, 0x1, 0x8, 0x2, 0x8, 0x8, 0x1, 0x1, 0x401, 0xffffffc0, 0x8, 0x8, 0xffffd848, 0x2]}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001540)={0x43, 0x9, 0x2, {0x8, 0x3, 0xffffffff, 0x4, 0x7f, 0x7f, 0x80, 0x8, 0xc642}}, 0x43) write$P9_RATTACH(r1, &(0x7f00000015c0)={0x14, 0x69, 0x2, {0x1, 0x0, 0x6}}, 0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840)={0x0, @multicast1, @multicast2}, &(0x7f0000001880)=0xc) 03:28:30 executing program 3: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x801, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x801, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x2012, {0x10, 0x4}, 0x4, r1, 0xee00, 0x1ff, 0x2, 0x9f61, 0x5, 0xa7, 0x6, 0x3ff, 0x1f, 0x99c0, 0x8, 0xffffffffffff5187, 0x2, 0x0, 0x1, 0x1}}, 0xa0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x11, 0xffffffffffffffff, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x4) write$9p(r2, &(0x7f0000000200)="f9a9a031e9c6d7330a1c7d7631fd7c2cdeb990da580ef35434e15f7fc64a1b034a53dec3e6bfbd08f61edcded7235e6a400caac65e72f4ef53fdd810480ef44ed2882f6bf8548217f6b8a7b8646c9eb201f6308a61f873da6b45ee98f4816c9e81ce35", 0x63) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x38, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x2}, @dead_binder_done, @exit_looper, @enter_looper, @decrefs, @decrefs={0x40046307, 0x2}, @dead_binder_done], 0xac, 0x0, &(0x7f00000002c0)="b799bfcff98c13a7bd71282828b8536f78053eb55baa53c9b4d40e3a578d3d55d2db48f403b7b6c98054e0eb84bad2fcb5edaeeaba37f6ec98b57e1454a8a1198a413fa75cd74b0265b13701a8a8657c6bdf186c84c2a42234aba88120f7fc4db65807b86c684ee445597403c11a3da9df9bf6c0fbd4676c9ce6678933b2866af584a60990392003849471a848bfa5fd04487826809d11bafbde6e825c3e86778ec05640479b3c10ed5d2272"}) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000003c0)=0x7, 0x4) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000400)={0x3, 0x2, 0x8}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x308}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x8000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x29, 0x51, 0x5, 0x7, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x54d, 0x5}}) r5 = memfd_secret(0x0) write$P9_RMKNOD(r5, &(0x7f00000007c0)={0x14, 0x13, 0x2, {0x78, 0x0, 0x5}}, 0x14) 03:28:30 executing program 6: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0xdf, 0x75, 0x2, {0xd4, "b275d947f5f8de0d9e8e74b350e3d6b6b5f0f28b685f9798d1424413b696397acccdca8a9b612efaf1e0971c4723dac113fdc6df952912f2168cb3815f103424f08a651c6507b96983cf64a6a71fb3c2023980b193fc04202c65a4479ee0f019d6fc8917c3b4c075915460b88b3204c0da5c8e9d07f75721ccafbcde84ec0b9dc5c2a246bfe79d54b0d7468a6040b609e784070f7219e9e7d29ea12a742e8883bcb0567530400c8c96f2512390b927453dd71a9f090467d6c6335464cff68a39dd99b332c0161f07fc3c2e13d0b1358cdc20a092"}}, 0xdf) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0xde1a, 0xfff, {0x20, 0x4, 0x8}, 0x4a000000, 0x20, 0x8ee, 0x6, 0x2, ')&', 0x1, '!', 0x1, '#', 0x2, '%$'}, 0x1, '\\', 0xffffffffffffffff, 0xee01}}, 0x4f) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x1, 0x2, 0x3}}, 0x14) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000280)={0x9, 0x7, 0x1}, 0x9) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x33, 0x2}, 0x7) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104800) write$P9_RLERRORu(r0, &(0x7f0000000340)={0xe, 0x7, 0x2, {{0x1, '\\'}, 0x9a74}}, 0xe) write$P9_RLERRORu(r0, &(0x7f0000000380)={0xe, 0x7, 0x1, {{0x1, '#'}, 0x9}}, 0xe) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCLUNK(r2, &(0x7f0000000400)={0x7, 0x79, 0x2}, 0x7) r3 = memfd_secret(0x80000) write$P9_RXATTRWALK(r3, &(0x7f0000000440)={0xf, 0x1f, 0x2, 0x9}, 0xf) write$P9_RREADDIR(r0, &(0x7f0000000480)={0x122, 0x29, 0x1, {0x4, [{{0x80, 0x1, 0x4}, 0x7f, 0x2d, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x5, 0x6, 0x7, './file0'}, {{0x4, 0x3, 0x6}, 0x7, 0x6, 0x7, './file0'}, {{0x43, 0x0, 0x4}, 0xffffffffffffff01, 0x8, 0x7, './file0'}, {{0x4, 0x4, 0x2}, 0x286, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x2, 0x1}, 0x1000, 0x7, 0x7, './file0'}, {{0x20, 0x0, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x1, 0x3}, 0x6, 0x4, 0x7, './file0'}]}}, 0x122) write$P9_RREAD(r1, &(0x7f00000005c0)={0x4b, 0x75, 0x1, {0x40, "43747de04873d2a8d07cd050afe9ca3658dcc402633223e2dc04ee32b81f68c81d136033b36631cc325407d42c3f8aebec81cd4d12a6caf677f5f80b63a1c4e6"}}, 0x4b) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7b, 0x1}, 0x7) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000680)={0xb27e, 0xfffffffa, 0x5}) write$P9_RUNLINKAT(r0, &(0x7f00000006c0)={0x7, 0x4d, 0x1}, 0x7) 03:28:30 executing program 4: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) r0 = memfd_secret(0x0) write$P9_RSTAT(r0, &(0x7f0000000040)={0x48, 0x7d, 0x1, {0x0, 0x41, 0x9, 0xf40, {0x20, 0x0, 0x8}, 0x81810000, 0x9, 0x1, 0x5, 0x7, '$[@#})&', 0x0, '', 0x5, '\\*,,)', 0x2, '.!'}}, 0x48) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x400) write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000140)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x80, 0x3, 0x3}}, 0x14) io_setup(0x4, &(0x7f00000001c0)) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) write$P9_RVERSION(r0, &(0x7f0000000280)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000002c0)={0x8, 0x40e}) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xef7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000440)) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 03:28:30 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x20}, 0x8001}}, 0x18) r1 = memfd_secret(0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x1, 0x0, 0x6}}, 0x14) r2 = memfd_secret(0x0) write$P9_RWALK(r2, &(0x7f0000000140)={0x8b, 0x6f, 0x2, {0xa, [{0x1, 0x1, 0x8}, {0x2, 0x3, 0x6}, {0x2, 0x3, 0x4}, {0x80, 0x2, 0x6}, {0x10, 0x2, 0x5}, {0x0, 0x3, 0x3}, {0x10, 0x0, 0x8}, {0x80, 0x3, 0x3}, {0x80, 0x4, 0x5}, {0x4, 0x2, 0x5}]}}, 0x8b) write$P9_RLOCK(r1, &(0x7f0000000200)={0x8, 0x35, 0x2, 0x3}, 0x8) write$P9_RCLUNK(r0, &(0x7f0000000240)={0x7, 0x79, 0x1}, 0x7) r3 = fsmount(r1, 0x1, 0xe1) write$P9_RSYMLINK(r3, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x80, 0x2, 0x6}}, 0x14) write$P9_RCLUNK(r3, &(0x7f00000002c0)={0x7, 0x79, 0x1}, 0x7) write$P9_RREADDIR(r2, &(0x7f0000000300)={0xc5, 0x29, 0x1, {0x4, [{{0x8, 0x2, 0x6}, 0x400, 0x81, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x1, 0x7, 0x7, './file0'}, {{0x10, 0x2, 0x5}, 0x7, 0x9, 0x7, './file0'}, {{0x4, 0x4, 0x5}, 0x5, 0x7f, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x8, 0x20, 0x7, './file0'}, {{0x0, 0x2, 0x1}, 0x81, 0x80, 0x7, './file0'}]}}, 0xc5) write$P9_RXATTRWALK(r0, &(0x7f0000000400)={0xf, 0x1f, 0x2, 0x1f}, 0xf) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) write$P9_RGETATTR(r0, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0x1220, {0x10, 0x4, 0x2}, 0x0, r4, r5, 0x6fbd, 0x8, 0x5, 0x81, 0xf2, 0x28, 0x9, 0x7, 0x2, 0x3, 0x8000000000000, 0x6, 0x8, 0x3, 0x7}}, 0xa0) accept$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000006c0)=0x14) 03:28:43 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x1, 0x81}) r1 = socket(0x29, 0x3, 0x7ff) getsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = accept(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000180)=0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x0, 0x9, 0x0, @loopback, @private2, 0x0, 0x10, 0x8, 0xce}}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={0x0, @can, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @can={0x1d, r4}, 0xf3, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000340)='gre0\x00', 0x8, 0xe777, 0xd}) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000400)) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000440)={0x4a, 0x6f, 0x1, {0x5, [{0x0, 0x1, 0x8}, {0x40, 0x2, 0x8}, {0x80, 0x4, 0x1}, {0x2, 0x4, 0x1}, {0x0, 0x0, 0x6}]}}, 0x4a) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) write$P9_RCLUNK(r5, &(0x7f00000004c0)={0x7, 0x79, 0x1}, 0x7) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000500)=0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = fsmount(r5, 0x1, 0xd) write$P9_RSETATTR(r6, &(0x7f0000000540)={0x7, 0x1b, 0x1}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000580)) ioctl$HIDIOCGFIELDINFO(r6, 0xc038480a, &(0x7f00000005c0)={0x1, 0x3, 0xbe3, 0x3f, 0x1, 0x101, 0x40, 0x20, 0x3, 0x4, 0xf0000000, 0x80, 0x4, 0x5}) ioctl$HIDIOCGFLAG(r5, 0x8004480e, &(0x7f0000000600)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000640)) 03:28:43 executing program 7: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x40010, 0xffffffffffffffff, 0xa5ad3000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @initdev}, &(0x7f0000000040)=0xc) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r2 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xca0}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x6, 0x1, 0x5, 0x3}, {0x0, 0x0, 0x7, 0x3f}, {0x4, 0x3, 0x1c, 0x5}, {0x3f, 0x7, 0x8c, 0x8001}, {0x6, 0x81, 0x5, 0x3ff}, {0x6, 0x20, 0x4, 0x4}, {0x2, 0x2, 0x0, 0x1000}, {0x6, 0x7, 0x0, 0x3484}, {0x1f, 0x1, 0x5, 0xa7b}, {0x6, 0x88, 0x1, 0xa00000}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}]}, 0x214}, 0x1, 0x0, 0x0, 0x240040c0}, 0x44804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x80}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x72}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x80) getsockname(r1, &(0x7f0000000600)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, &(0x7f0000000680)=0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf4, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000000}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48d4}, 0x20048000) r8 = accept(r1, &(0x7f0000000880)=@hci, &(0x7f0000000900)=0x80) getsockname(r8, &(0x7f0000000940)=@generic, &(0x7f00000009c0)=0x80) r9 = memfd_secret(0x0) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000a40)={0x0, @phonet={0x23, 0x6c, 0x4, 0x2f}, @qipcrtr={0x2a, 0x1}, @ax25={0x3, @null, 0x8}, 0x8000, 0x0, 0x0, 0x0, 0x8001, &(0x7f0000000a00)='wg1\x00', 0x4, 0x9e1, 0x8}) r10 = socket$inet(0x2, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000ac0)={'vlan1\x00'}) 03:28:43 executing program 0: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x2, 0x0, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x7b4c8df1, 0x40040) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x1, 0x2, 0x5}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r2, &(0x7f0000000140)="e5d9963b2ffeb902331a9f28aac6200f47fb0b55f435501b89bd59c0ff", 0x1d) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$snapshot(r3, &(0x7f00000001c0)=""/215, 0xd7) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1001, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x77) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r5 = fsmount(r4, 0x0, 0x83) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x6, 0x0, 0x9, 0x80, 0x0, 0x20, 0x242, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000400), 0x7}, 0x24, 0x6, 0x8, 0x9, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0x10, r5, 0x2) bind$bt_sco(r5, &(0x7f00000004c0), 0x8) r6 = syz_open_dev$hiddev(&(0x7f0000000500), 0x5fc10fb5, 0xf2000) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000000540)={{0x3, 0x200, 0x7f, 0x9, 0x1, 0x101}, 0x2fb, [0x7, 0x8000, 0x0, 0x5, 0x8, 0x7, 0x401, 0xbeb8, 0x4bfb380, 0x7fffffff, 0x1000, 0x2, 0x3, 0x4, 0x2, 0x6, 0x9, 0x3fe, 0x8, 0x81, 0x401, 0x6, 0x3, 0x81, 0xff, 0x4, 0x3, 0x8000, 0x0, 0x3, 0x8001, 0x3f, 0x3, 0x9af, 0x3, 0x80000001, 0x891, 0x7fffffff, 0x8, 0x81, 0x1000, 0x7, 0x0, 0x5, 0x83, 0x433, 0xffff, 0x1, 0xfe, 0x1000, 0x101, 0x0, 0x4, 0x1, 0xffff, 0x32d, 0x9, 0x20, 0xffffffff, 0x7, 0x9473048, 0x3, 0x3cba, 0x1, 0x6, 0xca8c, 0x0, 0x7, 0x5, 0x80, 0x3, 0x1, 0xfd18, 0x9, 0x0, 0x5, 0x8, 0xffff, 0x3, 0x8, 0x5, 0x3, 0x6, 0x4, 0x7, 0x7, 0xfffff001, 0x74af, 0x0, 0x80000001, 0x5, 0x9, 0x400, 0x80000001, 0x1000, 0x8, 0x7, 0xffffffb1, 0x1, 0x5, 0x1, 0x1, 0x9, 0x7fff, 0x5, 0x68e, 0x400, 0x40b, 0x61, 0x7fffffff, 0xfffff65c, 0x7, 0x800, 0x3, 0xccf6, 0x3, 0x10001, 0xc0, 0x7b8, 0x80000001, 0x5, 0x1, 0x2, 0x7fffffff, 0x1, 0x1, 0x0, 0x7fffffff, 0x30, 0xd2, 0x5, 0x9, 0x31e, 0x7, 0x9, 0x0, 0x1, 0x3f, 0x6a619927, 0x3, 0x8, 0x4, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7fffffff, 0x10000, 0x7c4, 0x0, 0x101, 0x8, 0x2, 0x0, 0x3, 0x2, 0x80000000, 0xf4eb, 0x7fffffff, 0x7, 0xfff, 0x8, 0x9f, 0x81, 0x4, 0x5, 0x3, 0xffffffa0, 0x0, 0x7f, 0x7, 0x9, 0x7, 0x3, 0x7, 0x9, 0x5, 0x1, 0x81, 0x0, 0x400000, 0x6, 0x6, 0x3, 0x2457, 0x1, 0x2, 0xc2e, 0x8, 0x2, 0x7fffffff, 0x7, 0x5, 0x0, 0x54, 0x4c, 0xffffffe1, 0x0, 0x81, 0x81, 0xfffffffd, 0xffffffff, 0x1, 0x80, 0xfffff1c8, 0x9, 0x6, 0x242aff92, 0x1, 0x3, 0xffffffff, 0x10001, 0x9, 0x2, 0x80000001, 0xffffffff, 0x1000, 0x9, 0x3ff, 0xb3af, 0x5, 0x10000, 0x8f5b, 0x4, 0x0, 0x500, 0xab61, 0x2, 0xfff, 0x200, 0x5, 0x5, 0x2, 0x7f, 0x64e42e36, 0x3f, 0x5, 0xa9, 0xfffff845, 0x100000, 0x596, 0x5, 0x9, 0x0, 0x10, 0x5, 0x0, 0x2, 0xe858, 0x1, 0x0, 0x7, 0x3, 0x6, 0x5, 0x6f85, 0x7ced, 0x7, 0x5, 0x2, 0x1, 0x8, 0x6, 0x1ff, 0x9095, 0x0, 0xfffffffe, 0x8, 0x3, 0x0, 0x7ff, 0x80, 0x854b, 0xffffffd0, 0x7, 0x3, 0x81b, 0x5, 0x6c, 0x8f, 0xfffffffc, 0x40, 0x2, 0x6, 0x401, 0x5, 0x1, 0x9, 0x1, 0x3f, 0x3, 0x100, 0x2, 0x3ff, 0x7, 0x5, 0x1, 0x8, 0x80, 0x7, 0x3ff, 0x2, 0x9, 0x4e, 0x101, 0x0, 0x1, 0x2, 0x800, 0x10001, 0x2, 0x2, 0x5, 0x3, 0x2bf8, 0x40, 0x3, 0x0, 0x1, 0x6, 0x5, 0x84db, 0x2000, 0x9c, 0x7fff, 0x3, 0x0, 0xe944, 0x6, 0x7, 0x8, 0x9, 0x7ff, 0x2, 0x9, 0x2, 0x2, 0x8, 0x0, 0x1, 0x5, 0x7fff, 0x5, 0x87, 0x602, 0x0, 0x3f, 0x3, 0x800, 0x2, 0x6, 0x3ff, 0x1f, 0xffffffff, 0x3, 0x362d, 0x0, 0x3, 0x81, 0x800, 0x212, 0x6, 0xff, 0x5, 0x8000, 0x0, 0x7, 0x5a7f, 0x5, 0x1, 0x3, 0x0, 0x4, 0x80000001, 0x3f, 0x5, 0x80000001, 0x5, 0xff, 0x2, 0x6, 0xcc, 0x10001, 0x400, 0x4147, 0x4, 0x400, 0xa0c, 0x4, 0xd430, 0x6, 0x6, 0x9, 0xccac, 0x2, 0x9, 0xeca, 0x800, 0x5, 0x9, 0x4, 0x0, 0xcf75, 0x9, 0x9, 0x7, 0x8001, 0x2, 0x1, 0x0, 0x1000, 0xfff, 0x8, 0x1, 0x3, 0x8e5, 0xffffff59, 0x738, 0x8, 0x38000, 0xb4f, 0x55e3, 0x7, 0x2, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x0, 0x3, 0x10, 0x5, 0x3, 0x3, 0x7, 0x2, 0x10000, 0x6, 0x1000, 0x1, 0x8000, 0x5, 0x3, 0x2, 0x9, 0x7, 0x8000000, 0x2, 0x1ff, 0x100, 0xbf0, 0x9, 0x40, 0x849f, 0x2, 0x81, 0x3ff, 0xfffffbff, 0x7fff, 0x7fff, 0xcb, 0x10000, 0x678, 0x100, 0xfffff801, 0x1ff, 0x72, 0x4, 0x7f, 0x4, 0x9a5d, 0x8, 0x100, 0x51af, 0x8, 0x7f, 0x7c, 0x0, 0x9, 0x5, 0x2, 0x45b5, 0x5, 0x5, 0x1, 0x8, 0xffff, 0x7, 0xfffffff7, 0x2c, 0x3ff, 0x2, 0x2, 0x8001, 0x4, 0xfff, 0x7, 0xba, 0x595, 0xffffffff, 0x7f, 0x200, 0x5, 0x0, 0x2, 0x3, 0x5, 0x5, 0x4f17, 0x7, 0x4, 0x1, 0x800, 0x7, 0xffff7fff, 0x7, 0x6, 0x6, 0x7, 0x0, 0x8, 0x101, 0xffffff00, 0xbab5, 0x6, 0x3, 0xa6, 0x8, 0x4, 0x104, 0x2c8500, 0x1, 0x7, 0x8, 0x7fffffff, 0x9, 0x81, 0x0, 0x9, 0x5, 0x5, 0x100, 0x1, 0x99b4, 0x0, 0x4, 0x100, 0x5, 0xd642, 0x52, 0xe2945d, 0x4, 0x20, 0x8, 0x1, 0x80, 0x40, 0x0, 0x399f, 0x9, 0x8, 0x6d, 0xc04, 0x3f, 0x2, 0x3, 0xa8, 0x7, 0x8, 0x8, 0x40, 0xffffffff, 0x5, 0x7fff, 0x81, 0xffffff00, 0x7fff, 0xd18, 0x2, 0x0, 0xe9, 0x7fffffff, 0x0, 0x4, 0x9, 0x401, 0xe00, 0xfffffff7, 0x7, 0x800, 0x9, 0xffffffff, 0x7, 0x4, 0x21e, 0x400, 0xfffffffd, 0xffffffff, 0x40, 0x7, 0x8, 0x6, 0x9, 0x5, 0x8, 0x2, 0x6, 0x6, 0x5, 0xd7b3, 0x20, 0x8, 0x5, 0x0, 0x7fff, 0x5, 0x5, 0x5, 0x8, 0x6, 0x2, 0xfffffff2, 0x4, 0x8, 0x1, 0xffffffff, 0x1, 0x2, 0x3, 0x4, 0x0, 0x3, 0x6, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xfffffbff, 0xffffff7f, 0x1, 0x0, 0x5f, 0x200, 0xcb, 0x6, 0x7, 0x1, 0x4, 0xcbe, 0x0, 0x3, 0xc6e9, 0x2, 0x2, 0x7fff, 0xb02, 0x46, 0x6, 0x7, 0x4, 0x6, 0x800, 0x292, 0x0, 0x800, 0x9, 0x80000000, 0x0, 0x2, 0xfd, 0xb18, 0x370d28c4, 0x9, 0xffffffff, 0x800, 0xb860, 0x3, 0x1, 0x9, 0x5, 0x4, 0x4, 0x7f, 0x4, 0x7f, 0x81, 0x8, 0xd1a9, 0x0, 0x57, 0x4, 0x3, 0x6, 0x8000, 0x0, 0x6, 0x8001, 0x0, 0xffffffff, 0xfffffffd, 0x1, 0x8, 0x3, 0x5, 0xc0000000, 0xfff, 0xac, 0x1f, 0x101, 0x3, 0x3ff, 0x1, 0x7, 0x1000, 0x80000000, 0x8, 0x0, 0x10001, 0x0, 0xd0, 0x6, 0x7, 0x3, 0x1b1e, 0x1, 0x5, 0xfffffffd, 0x0, 0x8, 0x4, 0x7fff, 0xa1a6, 0x81, 0xd407, 0x4, 0x4, 0x1f, 0x1ff, 0x5, 0xa5c, 0x2, 0x7, 0x3, 0x3, 0x4, 0x8, 0xfa, 0xc2a, 0x401, 0x8, 0x20, 0x400, 0x368dd918, 0x80000000, 0x7, 0x6103c46d, 0x2, 0x78, 0x0, 0x8, 0xe7, 0x0, 0x3, 0x80000001, 0x1ff, 0x500, 0x81, 0x7d, 0x0, 0x70000, 0x6, 0x0, 0xd1, 0xffff893f, 0x7, 0x0, 0x2, 0x1, 0xfffffeff, 0x6, 0x82, 0x5, 0x80, 0x9, 0xd6e, 0x70d5, 0x8, 0xfffffff8, 0x2, 0x80000000, 0x2, 0x10001, 0xffffffff, 0x8, 0x8, 0x40, 0xff, 0x2, 0xffffffff, 0x1c, 0x80000000, 0x8000, 0x5, 0x40, 0x10000, 0x401, 0x5, 0x6, 0x200, 0xffffffe0, 0x6, 0x6, 0x1, 0x5aa, 0x2, 0xffffffff, 0x20, 0x20eef9e0, 0x80000000, 0x9, 0x800, 0x800, 0x3, 0x2, 0x2, 0x3, 0x100, 0x3, 0x3, 0x8001, 0xab16a4d3, 0x1fff, 0x4, 0x6, 0x80000001, 0x10000, 0x2, 0x2, 0xb1f166b, 0x3, 0x8, 0x4, 0x4, 0x8, 0x7, 0xffffffff, 0xd1, 0x8, 0x6, 0x800, 0x1, 0xfff, 0xffffffff, 0x0, 0xfffffff7, 0x5, 0x8, 0x4, 0x8, 0x8, 0x7aaa30a8, 0x101, 0x8, 0x7ff, 0x9, 0x8, 0x19f, 0x3, 0xbbb6, 0x1000, 0x7ff, 0x0, 0x3ff, 0x100, 0x1, 0x9, 0x0, 0x0, 0x9, 0x88e8, 0x1, 0x453c, 0x0, 0x1, 0x400, 0x0, 0x2, 0xda, 0x7, 0x3ff, 0xfffffbff, 0x7, 0x7, 0x10000, 0x4, 0x80, 0x7fffffff, 0x9, 0x401, 0x81, 0x1ff, 0x6, 0x8, 0x5, 0x4607, 0x9, 0x7, 0xff, 0x7fffffff, 0x6, 0x400, 0x9, 0x0, 0x800, 0x7, 0x5, 0x80000001, 0x9, 0x5, 0x6, 0x8, 0x2, 0x9721, 0x9, 0x8, 0x0, 0x400, 0x200, 0x4, 0x2, 0x5, 0xffff, 0x9, 0x3f, 0x1, 0x8001, 0x8, 0x7, 0xb47, 0x9, 0x6, 0x9, 0x9, 0x5, 0x3, 0x10001, 0xffffffff, 0x4, 0x3, 0x1, 0x7, 0x200, 0x7, 0x3, 0x4, 0x1, 0x7fffffff, 0x5, 0x7f, 0x4, 0x81, 0x0, 0x200, 0x0, 0x5, 0x800, 0x4, 0x7, 0x6, 0x3, 0x9, 0x5, 0x401, 0x80000000, 0x1ff, 0xfffffffc, 0x5, 0xffffffff, 0xfff, 0x2, 0x9, 0x6, 0x1000, 0x90, 0xb391, 0x3, 0x81, 0x17, 0x0, 0x1, 0x6, 0x5, 0x4, 0xffff, 0x9, 0x3, 0xba, 0x1, 0x10001, 0xffffffff, 0x2, 0x4f43, 0x11, 0x40, 0x1000000, 0x10000, 0x9, 0x8, 0x6, 0xffffa48e, 0x0, 0x7, 0x1000, 0x7fffffff, 0x3, 0x7, 0x3, 0x4, 0x1, 0xe00, 0x3ff]}) r7 = fsmount(r5, 0x1, 0x5) read$snapshot(r7, &(0x7f0000001580)=""/94, 0x5e) 03:28:43 executing program 6: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0xdf, 0x75, 0x2, {0xd4, "b275d947f5f8de0d9e8e74b350e3d6b6b5f0f28b685f9798d1424413b696397acccdca8a9b612efaf1e0971c4723dac113fdc6df952912f2168cb3815f103424f08a651c6507b96983cf64a6a71fb3c2023980b193fc04202c65a4479ee0f019d6fc8917c3b4c075915460b88b3204c0da5c8e9d07f75721ccafbcde84ec0b9dc5c2a246bfe79d54b0d7468a6040b609e784070f7219e9e7d29ea12a742e8883bcb0567530400c8c96f2512390b927453dd71a9f090467d6c6335464cff68a39dd99b332c0161f07fc3c2e13d0b1358cdc20a092"}}, 0xdf) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0xde1a, 0xfff, {0x20, 0x4, 0x8}, 0x4a000000, 0x20, 0x8ee, 0x6, 0x2, ')&', 0x1, '!', 0x1, '#', 0x2, '%$'}, 0x1, '\\', 0xffffffffffffffff, 0xee01}}, 0x4f) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x1, 0x2, 0x3}}, 0x14) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000280)={0x9, 0x7, 0x1}, 0x9) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x33, 0x2}, 0x7) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104800) write$P9_RLERRORu(r0, &(0x7f0000000340)={0xe, 0x7, 0x2, {{0x1, '\\'}, 0x9a74}}, 0xe) write$P9_RLERRORu(r0, &(0x7f0000000380)={0xe, 0x7, 0x1, {{0x1, '#'}, 0x9}}, 0xe) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCLUNK(r2, &(0x7f0000000400)={0x7, 0x79, 0x2}, 0x7) r3 = memfd_secret(0x80000) write$P9_RXATTRWALK(r3, &(0x7f0000000440)={0xf, 0x1f, 0x2, 0x9}, 0xf) write$P9_RREADDIR(r0, &(0x7f0000000480)={0x122, 0x29, 0x1, {0x4, [{{0x80, 0x1, 0x4}, 0x7f, 0x2d, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x5, 0x6, 0x7, './file0'}, {{0x4, 0x3, 0x6}, 0x7, 0x6, 0x7, './file0'}, {{0x43, 0x0, 0x4}, 0xffffffffffffff01, 0x8, 0x7, './file0'}, {{0x4, 0x4, 0x2}, 0x286, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x2, 0x1}, 0x1000, 0x7, 0x7, './file0'}, {{0x20, 0x0, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x1, 0x3}, 0x6, 0x4, 0x7, './file0'}]}}, 0x122) write$P9_RREAD(r1, &(0x7f00000005c0)={0x4b, 0x75, 0x1, {0x40, "43747de04873d2a8d07cd050afe9ca3658dcc402633223e2dc04ee32b81f68c81d136033b36631cc325407d42c3f8aebec81cd4d12a6caf677f5f80b63a1c4e6"}}, 0x4b) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7b, 0x1}, 0x7) ioctl$HIDIOCGCOLLECTIONINFO(r3, 0xc0104811, &(0x7f0000000680)={0xb27e, 0xfffffffa, 0x5}) 03:28:43 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLERROR(r0, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '%'}}, 0xa) write$P9_RREAD(r0, &(0x7f0000000040)={0x10a, 0x75, 0x1, {0xff, "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"}}, 0x10a) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x81, 0xf9, 0x1, 0x0, 0x68, 0x240, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100c0, 0xf1, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x30, 0x8, 0x0, 0x0, 0x8, 0x200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1400, 0x6, 0xffffffff, 0x3, 0x5, 0xff, 0x3ff, 0x0, 0x100, 0x0, 0x100000000}, 0x0, 0x7, r1, 0x4) write$P9_RLERROR(r0, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x841) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x39, 0x10601) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/93) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000500)={{0x3, 0x100, 0x1, 0xc11, 0x2, 0x81}, 0xf6, [0x8, 0x401, 0x3f, 0x1, 0x10000, 0x3, 0x1ff, 0x5, 0x101, 0x9, 0x3, 0x3, 0x6, 0x7, 0x0, 0x5, 0x100, 0x7ff, 0x7ff, 0x0, 0x7fff, 0x7, 0x0, 0x8542, 0xa, 0xfffffff9, 0x1, 0x6, 0x82, 0x7, 0x5, 0x5, 0xff, 0x2, 0x80000001, 0x0, 0x10001, 0x0, 0x3ff, 0x2, 0x5, 0x1, 0x5, 0x1, 0x1, 0xeb9f, 0x8, 0x8001, 0x4, 0x6, 0x401, 0x8, 0x1, 0x20, 0xef, 0x0, 0x200, 0x2, 0x3, 0x8, 0xfffffffd, 0x3, 0x7, 0x56, 0x9bd6, 0x7, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x14000000, 0x7fffffff, 0x7, 0x1ff, 0x56, 0x8001, 0x400, 0x4, 0x8000, 0xfff, 0x3, 0x4, 0x3ff, 0x3, 0x1, 0x1f, 0xfff, 0x200, 0x9, 0x7, 0x3c3f, 0xfff, 0x5, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0x7, 0x4, 0x6, 0x101, 0x0, 0x7, 0x7, 0x400, 0xd1, 0x10001, 0x6, 0x1, 0x100, 0x3, 0x7, 0x4, 0x7fff, 0x2, 0x5, 0xf2, 0x113d70bb, 0x3, 0xffffffff, 0x1f, 0x20, 0x6, 0x8, 0x401, 0x6, 0x7f, 0x6, 0x3f, 0x3, 0x401, 0x5, 0x1, 0x80, 0x8, 0x10000, 0x7fff, 0x1, 0x1, 0x10000, 0x9, 0x5a7e9d0f, 0x4, 0x6, 0x8, 0x100, 0x8000, 0xfffffffc, 0x371b, 0x1, 0xd0, 0x1, 0x6, 0x200, 0x1, 0x675, 0xfffff229, 0x9, 0x2, 0x5, 0x3, 0x200, 0x30000, 0x1000, 0x4, 0xfffffeff, 0x5, 0x5, 0x100, 0x7, 0x10001, 0x1, 0x8, 0x8, 0x7fffffff, 0x8, 0x6, 0x7f, 0x5, 0x8, 0x8, 0x7fff, 0x2, 0x82b, 0x8001, 0x5, 0x5, 0x1f, 0x67, 0x20, 0x0, 0x1, 0x7, 0x101, 0x3, 0x0, 0xe69, 0x800, 0x0, 0x8, 0x1ff, 0xa4e1, 0xc92, 0x3, 0xa2e6, 0xfffffbff, 0x2, 0x0, 0x3, 0x3, 0x5, 0x0, 0x6f861b8b, 0x6, 0x80000001, 0x7217e9fb, 0x1, 0x401, 0x80, 0x7a880, 0x5, 0x0, 0x72e, 0x81, 0x40, 0x1000, 0x80000001, 0x4, 0x3, 0x1f, 0x37, 0x100, 0xce9, 0x80, 0x4, 0x80, 0x0, 0x200, 0x3, 0xfff, 0x7, 0x3f, 0x3, 0x80000001, 0x7, 0x3, 0x1ef, 0xfffffffb, 0x1, 0x2e5, 0x1, 0x101, 0x9, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x8, 0xfa7e, 0x401, 0x7, 0x0, 0x8d8, 0xbe6, 0x3, 0xec, 0x1, 0x9e, 0x6, 0x3, 0x1ff, 0xd373, 0x100, 0xe7, 0x0, 0xfffffffc, 0x1, 0x61877ea5, 0x9, 0x80000000, 0x200, 0x1, 0x0, 0x6f9, 0x2, 0x7fff, 0x5, 0x1ff, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x5, 0x4, 0xd040, 0x7fffffff, 0x7, 0x1, 0x2, 0x877a, 0x4, 0x35f, 0x9, 0x2, 0x2, 0x4, 0xffffffff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0xfffffffd, 0xd6c9, 0x5, 0x6, 0x7f, 0x20, 0x4, 0x3, 0xfffffff8, 0x401, 0x8, 0x9, 0x80000000, 0x9, 0x8000, 0x1ff, 0x2, 0x400, 0x8, 0x8000, 0x75, 0x6, 0x0, 0x3, 0x800, 0x9, 0x0, 0xdae, 0x9efc, 0x67, 0x401, 0xffffe130, 0x7, 0x0, 0x0, 0x3, 0xf768, 0x2, 0x4, 0x4, 0xd335, 0x7fffffff, 0x1, 0x0, 0x40, 0x9, 0x80000000, 0x0, 0x6, 0xffffffff, 0x200, 0x1, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x1, 0x81, 0x8, 0x8, 0x8, 0x0, 0x10000, 0x40, 0x3, 0x3, 0x3d056ec0, 0x9, 0x3, 0x1ff, 0xb5, 0x2, 0x4, 0x1ff, 0xef1d, 0x1, 0x4, 0x10001, 0x7fff, 0x1, 0x100, 0xfffffffd, 0x1, 0x9, 0x6, 0xca8f, 0xffffffff, 0x400, 0x3, 0x1e3b2463, 0x101, 0x401, 0x3f, 0x42c, 0x4, 0x10001, 0x62d, 0x0, 0x20, 0x5, 0x10000, 0x9, 0x1, 0xe123, 0x2, 0x1, 0xffff8000, 0x8, 0x3, 0x8001, 0xff, 0x3, 0x401, 0x100, 0x8000, 0x9, 0xcfc, 0xfffffffe, 0x8001, 0x4, 0xffff, 0xb9, 0x7, 0x0, 0x4, 0x1000, 0x1, 0x7ff, 0x7, 0x1, 0x0, 0xaff, 0x2, 0x8da, 0x99e, 0x0, 0x0, 0x5, 0x3, 0x20, 0x3f, 0x4, 0x3ff, 0x0, 0xeb76, 0x106, 0x1, 0x3, 0x80, 0x6, 0x9, 0x5, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x5, 0x1ff, 0x763, 0x80000000, 0xc, 0xe9, 0x3f, 0x1, 0xd7d2, 0x0, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x14, 0x2, 0x1, 0x3, 0xff, 0x80000001, 0xb7, 0x2e, 0x6, 0x61b, 0x3, 0x0, 0x3, 0x8001, 0x8, 0x5, 0xb2c, 0x101, 0x200, 0x3f, 0x7fff, 0x3, 0x2, 0x10000, 0x400, 0x2c, 0xcb5d, 0x7, 0x96c, 0x2, 0x7fff, 0x0, 0x80, 0x6, 0x5, 0x0, 0xf192, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x9, 0xd7fd, 0x4, 0x7, 0x5, 0x945, 0xfffffffc, 0x1, 0xfffff48a, 0x5, 0x5, 0xe0, 0x4, 0x3, 0x9, 0x80000000, 0x1f, 0x200, 0x0, 0xd8b, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0xffffffff, 0xffff, 0x401, 0x5, 0x4, 0x7fffffff, 0x8, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x0, 0xddd3, 0x2, 0x400000, 0x8, 0x40, 0x5d96, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x0, 0xc92, 0x100, 0x5, 0x6, 0x4, 0x9, 0x6, 0x101, 0x7, 0x7fff, 0x36e, 0x20, 0x20, 0x100, 0x200, 0xd874, 0x2, 0x20000, 0xd3, 0x8001, 0x3fc000, 0x3, 0x5, 0x40, 0x5, 0x4, 0x0, 0x9, 0x9, 0xff8, 0x7fff, 0x6, 0x1, 0x80000000, 0x8, 0x9, 0xf0, 0x200, 0x9, 0x10001, 0x0, 0x4d, 0x8000, 0xcd60, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x1f, 0x8, 0xfffffff8, 0x4, 0x6, 0x0, 0x5, 0x400, 0x4, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7f, 0xad9, 0x1, 0x7, 0x8000, 0x6, 0x2, 0x100, 0x9, 0x4, 0x1f, 0x200, 0x7, 0x2, 0x8, 0x7, 0x0, 0x8, 0x8, 0x40, 0xffffffff, 0x8, 0xfffffffc, 0x9, 0x8, 0x1, 0x8, 0xf7c, 0x9, 0x0, 0x2, 0x3, 0x10001, 0x97, 0x6, 0x9, 0x40, 0x7fff, 0xfffffff7, 0x463, 0x3, 0x2, 0x9, 0x15, 0x6, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0xe5e, 0x7f, 0x8, 0x4, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x1000, 0x7ff, 0x7, 0x3f, 0xff, 0x7, 0x4592, 0x1, 0x4, 0x2, 0x91f, 0x8, 0x4, 0x1, 0x100, 0x6cc6e587, 0xfffeffff, 0x8, 0x3f, 0x6, 0x5, 0x10001, 0x80000000, 0x4, 0x4, 0x8, 0x4, 0x8, 0x8, 0x6, 0xffff7a04, 0x9, 0xe1f, 0x0, 0x7, 0x9, 0x1ff, 0x400, 0x800, 0x3, 0x8001, 0x9, 0x4, 0x0, 0x5, 0xfff, 0x5, 0x9, 0x9, 0xf4, 0xff, 0x9, 0x83, 0x1, 0x7fffffff, 0x800, 0x401, 0xe68, 0x1a, 0x8000, 0xffff, 0x368, 0x5, 0x4, 0x3, 0x7, 0x9, 0x6d, 0x1, 0x9, 0xe2, 0x3, 0x0, 0x9, 0x0, 0x10001, 0x4a6909f, 0x1c, 0x6, 0x9, 0x560, 0x6, 0x10001, 0x1f7, 0x705, 0x5, 0x1435, 0x2, 0x6, 0x1ff, 0x20, 0xfffffff8, 0x4, 0x1, 0x100, 0xfffffffa, 0x9, 0x40, 0xfffffff9, 0x4, 0x9, 0x81, 0x6f5f, 0x81, 0xff, 0x7, 0x0, 0x4, 0x5, 0x8, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x0, 0x4, 0x3, 0x512, 0x7, 0x40, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0xffffed81, 0x7, 0x7, 0x1, 0x3, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x2, 0x2, 0x9, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4454, 0x6, 0x40dc, 0x8, 0x99ad, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5, 0xdfda, 0x0, 0x100, 0x2, 0x8, 0x37800000, 0x1, 0x1, 0x81, 0xc94c, 0x5, 0x80, 0x20, 0x7, 0x4, 0x3, 0x8, 0x711, 0x3e, 0x200, 0x6, 0x4b, 0x1f, 0x8, 0x2, 0x101, 0xd2c, 0x62fd1a7, 0x0, 0x9, 0x2, 0x1, 0x9, 0x0, 0x6ea, 0x6, 0x20, 0x8, 0xfffffff9, 0x8000, 0x20, 0x720f, 0x4, 0x4, 0x2, 0x1000, 0x5587, 0x800, 0xffff, 0xc30, 0x5, 0x7, 0x4, 0x8, 0x3c6e, 0x36000000, 0x1, 0x10, 0x800, 0x7, 0xebc7, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7, 0x7, 0x9, 0xffffffff, 0x0, 0x7f, 0x101, 0x1, 0x700, 0xf4a, 0x5, 0x3, 0x40, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x20, 0x6, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x5, 0x5, 0x6, 0x0, 0x7, 0x19, 0x9, 0x1f, 0x9, 0x800, 0x6, 0x9, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x33, 0x0, 0x80000001, 0xdd, 0xffff, 0x80000001, 0x1, 0x8, 0x2, 0x8, 0x8, 0x1, 0x1, 0x401, 0xffffffc0, 0x8, 0x8, 0xffffd848, 0x2]}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000001540)={0x43, 0x9, 0x2, {0x8, 0x3, 0xffffffff, 0x4, 0x7f, 0x7f, 0x80, 0x8, 0xc642}}, 0x43) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840)={0x0, @multicast1, @multicast2}, &(0x7f0000001880)=0xc) 03:28:43 executing program 3: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x801, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x801, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x2012, {0x10, 0x4}, 0x4, r1, 0xee00, 0x1ff, 0x2, 0x9f61, 0x5, 0xa7, 0x6, 0x3ff, 0x1f, 0x99c0, 0x8, 0xffffffffffff5187, 0x2, 0x0, 0x1, 0x1}}, 0xa0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x11, 0xffffffffffffffff, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x4) write$9p(r2, &(0x7f0000000200)="f9a9a031e9c6d7330a1c7d7631fd7c2cdeb990da580ef35434e15f7fc64a1b034a53dec3e6bfbd08f61edcded7235e6a400caac65e72f4ef53fdd810480ef44ed2882f6bf8548217f6b8a7b8646c9eb201f6308a61f873da6b45ee98f4816c9e81ce35", 0x63) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x38, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x2}, @dead_binder_done, @exit_looper, @enter_looper, @decrefs, @decrefs={0x40046307, 0x2}, @dead_binder_done], 0xac, 0x0, &(0x7f00000002c0)="b799bfcff98c13a7bd71282828b8536f78053eb55baa53c9b4d40e3a578d3d55d2db48f403b7b6c98054e0eb84bad2fcb5edaeeaba37f6ec98b57e1454a8a1198a413fa75cd74b0265b13701a8a8657c6bdf186c84c2a42234aba88120f7fc4db65807b86c684ee445597403c11a3da9df9bf6c0fbd4676c9ce6678933b2866af584a60990392003849471a848bfa5fd04487826809d11bafbde6e825c3e86778ec05640479b3c10ed5d2272"}) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000003c0)=0x7, 0x4) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000400)={0x3, 0x2, 0x8}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x308}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x8000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x29, 0x51, 0x5, 0x7, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x54d, 0x5}}) memfd_secret(0x0) 03:28:43 executing program 4: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) r0 = memfd_secret(0x0) write$P9_RSTAT(r0, &(0x7f0000000040)={0x48, 0x7d, 0x1, {0x0, 0x41, 0x9, 0xf40, {0x20, 0x0, 0x8}, 0x81810000, 0x9, 0x1, 0x5, 0x7, '$[@#})&', 0x0, '', 0x5, '\\*,,)', 0x2, '.!'}}, 0x48) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x400) write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000140)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x80, 0x3, 0x3}}, 0x14) io_setup(0x4, &(0x7f00000001c0)) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) write$P9_RVERSION(r0, &(0x7f0000000280)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000002c0)={0x8, 0x40e}) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xef7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20004800) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000440)) 03:28:43 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x20}, 0x8001}}, 0x18) r1 = memfd_secret(0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x1, 0x0, 0x6}}, 0x14) r2 = memfd_secret(0x0) write$P9_RWALK(r2, &(0x7f0000000140)={0x8b, 0x6f, 0x2, {0xa, [{0x1, 0x1, 0x8}, {0x2, 0x3, 0x6}, {0x2, 0x3, 0x4}, {0x80, 0x2, 0x6}, {0x10, 0x2, 0x5}, {0x0, 0x3, 0x3}, {0x10, 0x0, 0x8}, {0x80, 0x3, 0x3}, {0x80, 0x4, 0x5}, {0x4, 0x2, 0x5}]}}, 0x8b) write$P9_RLOCK(r1, &(0x7f0000000200)={0x8, 0x35, 0x2, 0x3}, 0x8) write$P9_RCLUNK(r0, &(0x7f0000000240)={0x7, 0x79, 0x1}, 0x7) r3 = fsmount(r1, 0x1, 0xe1) write$P9_RSYMLINK(r3, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x80, 0x2, 0x6}}, 0x14) write$P9_RCLUNK(r3, &(0x7f00000002c0)={0x7, 0x79, 0x1}, 0x7) write$P9_RREADDIR(r2, &(0x7f0000000300)={0xc5, 0x29, 0x1, {0x4, [{{0x8, 0x2, 0x6}, 0x400, 0x81, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x1, 0x7, 0x7, './file0'}, {{0x10, 0x2, 0x5}, 0x7, 0x9, 0x7, './file0'}, {{0x4, 0x4, 0x5}, 0x5, 0x7f, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x8, 0x20, 0x7, './file0'}, {{0x0, 0x2, 0x1}, 0x81, 0x80, 0x7, './file0'}]}}, 0xc5) write$P9_RXATTRWALK(r0, &(0x7f0000000400)={0xf, 0x1f, 0x2, 0x1f}, 0xf) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) write$P9_RGETATTR(r0, &(0x7f00000005c0)={0xa0, 0x19, 0x2, {0x1220, {0x10, 0x4, 0x2}, 0x0, r4, r5, 0x6fbd, 0x8, 0x5, 0x81, 0xf2, 0x28, 0x9, 0x7, 0x2, 0x3, 0x8000000000000, 0x6, 0x8, 0x3, 0x7}}, 0xa0) 03:28:43 executing program 4: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) r0 = memfd_secret(0x0) write$P9_RSTAT(r0, &(0x7f0000000040)={0x48, 0x7d, 0x1, {0x0, 0x41, 0x9, 0xf40, {0x20, 0x0, 0x8}, 0x81810000, 0x9, 0x1, 0x5, 0x7, '$[@#})&', 0x0, '', 0x5, '\\*,,)', 0x2, '.!'}}, 0x48) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x400) write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000140)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x80, 0x3, 0x3}}, 0x14) io_setup(0x4, &(0x7f00000001c0)) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) write$P9_RVERSION(r0, &(0x7f0000000280)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000002c0)={0x8, 0x40e}) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) memfd_secret(0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000440)) 03:28:43 executing program 5: r0 = fsmount(0xffffffffffffffff, 0x0, 0x1) write$P9_RLERROR(r0, &(0x7f0000000000)={0xa, 0x7, 0x1, {0x1, '%'}}, 0xa) write$P9_RREAD(r0, &(0x7f0000000040)={0x10a, 0x75, 0x1, {0xff, "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"}}, 0x10a) r1 = perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2, 0x81, 0xf9, 0x1, 0x0, 0x68, 0x240, 0xb, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x43, 0x2, @perf_bp={&(0x7f0000000240), 0x6}, 0x100c0, 0xf1, 0x7, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r0, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x30, 0x8, 0x0, 0x0, 0x8, 0x200, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x1400, 0x6, 0xffffffff, 0x3, 0x5, 0xff, 0x3ff, 0x0, 0x100, 0x0, 0x100000000}, 0x0, 0x7, r1, 0x4) write$P9_RLERROR(r0, &(0x7f0000000300)={0xa, 0x7, 0x2, {0x1, '%'}}, 0xa) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x841) r2 = syz_open_dev$evdev(&(0x7f0000000440), 0x39, 0x10601) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000480)=""/93) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000500)={{0x3, 0x100, 0x1, 0xc11, 0x2, 0x81}, 0xf6, [0x8, 0x401, 0x3f, 0x1, 0x10000, 0x3, 0x1ff, 0x5, 0x101, 0x9, 0x3, 0x3, 0x6, 0x7, 0x0, 0x5, 0x100, 0x7ff, 0x7ff, 0x0, 0x7fff, 0x7, 0x0, 0x8542, 0xa, 0xfffffff9, 0x1, 0x6, 0x82, 0x7, 0x5, 0x5, 0xff, 0x2, 0x80000001, 0x0, 0x10001, 0x0, 0x3ff, 0x2, 0x5, 0x1, 0x5, 0x1, 0x1, 0xeb9f, 0x8, 0x8001, 0x4, 0x6, 0x401, 0x8, 0x1, 0x20, 0xef, 0x0, 0x200, 0x2, 0x3, 0x8, 0xfffffffd, 0x3, 0x7, 0x56, 0x9bd6, 0x7, 0xfff, 0x0, 0x8000, 0x2, 0x5, 0x14000000, 0x7fffffff, 0x7, 0x1ff, 0x56, 0x8001, 0x400, 0x4, 0x8000, 0xfff, 0x3, 0x4, 0x3ff, 0x3, 0x1, 0x1f, 0xfff, 0x200, 0x9, 0x7, 0x3c3f, 0xfff, 0x5, 0x9, 0x8, 0x46, 0x7ff, 0x9, 0x7, 0x4, 0x6, 0x101, 0x0, 0x7, 0x7, 0x400, 0xd1, 0x10001, 0x6, 0x1, 0x100, 0x3, 0x7, 0x4, 0x7fff, 0x2, 0x5, 0xf2, 0x113d70bb, 0x3, 0xffffffff, 0x1f, 0x20, 0x6, 0x8, 0x401, 0x6, 0x7f, 0x6, 0x3f, 0x3, 0x401, 0x5, 0x1, 0x80, 0x8, 0x10000, 0x7fff, 0x1, 0x1, 0x10000, 0x9, 0x5a7e9d0f, 0x4, 0x6, 0x8, 0x100, 0x8000, 0xfffffffc, 0x371b, 0x1, 0xd0, 0x1, 0x6, 0x200, 0x1, 0x675, 0xfffff229, 0x9, 0x2, 0x5, 0x3, 0x200, 0x30000, 0x1000, 0x4, 0xfffffeff, 0x5, 0x5, 0x100, 0x7, 0x10001, 0x1, 0x8, 0x8, 0x7fffffff, 0x8, 0x6, 0x7f, 0x5, 0x8, 0x8, 0x7fff, 0x2, 0x82b, 0x8001, 0x5, 0x5, 0x1f, 0x67, 0x20, 0x0, 0x1, 0x7, 0x101, 0x3, 0x0, 0xe69, 0x800, 0x0, 0x8, 0x1ff, 0xa4e1, 0xc92, 0x3, 0xa2e6, 0xfffffbff, 0x2, 0x0, 0x3, 0x3, 0x5, 0x0, 0x6f861b8b, 0x6, 0x80000001, 0x7217e9fb, 0x1, 0x401, 0x80, 0x7a880, 0x5, 0x0, 0x72e, 0x81, 0x40, 0x1000, 0x80000001, 0x4, 0x3, 0x1f, 0x37, 0x100, 0xce9, 0x80, 0x4, 0x80, 0x0, 0x200, 0x3, 0xfff, 0x7, 0x3f, 0x3, 0x80000001, 0x7, 0x3, 0x1ef, 0xfffffffb, 0x1, 0x2e5, 0x1, 0x101, 0x9, 0x7, 0x6, 0xfffffffd, 0x8, 0x2, 0x0, 0x40000000, 0x0, 0x0, 0x9, 0x3, 0x8001, 0x9, 0x8, 0xfa7e, 0x401, 0x7, 0x0, 0x8d8, 0xbe6, 0x3, 0xec, 0x1, 0x9e, 0x6, 0x3, 0x1ff, 0xd373, 0x100, 0xe7, 0x0, 0xfffffffc, 0x1, 0x61877ea5, 0x9, 0x80000000, 0x200, 0x1, 0x0, 0x6f9, 0x2, 0x7fff, 0x5, 0x1ff, 0x3, 0x7, 0x2, 0x1ff, 0x8, 0x5, 0x4, 0xd040, 0x7fffffff, 0x7, 0x1, 0x2, 0x877a, 0x4, 0x35f, 0x9, 0x2, 0x2, 0x4, 0xffffffff, 0x3, 0x8000, 0x7, 0x2, 0x9, 0xfffffffd, 0xd6c9, 0x5, 0x6, 0x7f, 0x20, 0x4, 0x3, 0xfffffff8, 0x401, 0x8, 0x9, 0x80000000, 0x9, 0x8000, 0x1ff, 0x2, 0x400, 0x8, 0x8000, 0x75, 0x6, 0x0, 0x3, 0x800, 0x9, 0x0, 0xdae, 0x9efc, 0x67, 0x401, 0xffffe130, 0x7, 0x0, 0x0, 0x3, 0xf768, 0x2, 0x4, 0x4, 0xd335, 0x7fffffff, 0x1, 0x0, 0x40, 0x9, 0x80000000, 0x0, 0x6, 0xffffffff, 0x200, 0x1, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x1, 0x81, 0x8, 0x8, 0x8, 0x0, 0x10000, 0x40, 0x3, 0x3, 0x3d056ec0, 0x9, 0x3, 0x1ff, 0xb5, 0x2, 0x4, 0x1ff, 0xef1d, 0x1, 0x4, 0x10001, 0x7fff, 0x1, 0x100, 0xfffffffd, 0x1, 0x9, 0x6, 0xca8f, 0xffffffff, 0x400, 0x3, 0x1e3b2463, 0x101, 0x401, 0x3f, 0x42c, 0x4, 0x10001, 0x62d, 0x0, 0x20, 0x5, 0x10000, 0x9, 0x1, 0xe123, 0x2, 0x1, 0xffff8000, 0x8, 0x3, 0x8001, 0xff, 0x3, 0x401, 0x100, 0x8000, 0x9, 0xcfc, 0xfffffffe, 0x8001, 0x4, 0xffff, 0xb9, 0x7, 0x0, 0x4, 0x1000, 0x1, 0x7ff, 0x7, 0x1, 0x0, 0xaff, 0x2, 0x8da, 0x99e, 0x0, 0x0, 0x5, 0x3, 0x20, 0x3f, 0x4, 0x3ff, 0x0, 0xeb76, 0x106, 0x1, 0x3, 0x80, 0x6, 0x9, 0x5, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x5, 0x1ff, 0x763, 0x80000000, 0xc, 0xe9, 0x3f, 0x1, 0xd7d2, 0x0, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x1, 0x14, 0x2, 0x1, 0x3, 0xff, 0x80000001, 0xb7, 0x2e, 0x6, 0x61b, 0x3, 0x0, 0x3, 0x8001, 0x8, 0x5, 0xb2c, 0x101, 0x200, 0x3f, 0x7fff, 0x3, 0x2, 0x10000, 0x400, 0x2c, 0xcb5d, 0x7, 0x96c, 0x2, 0x7fff, 0x0, 0x80, 0x6, 0x5, 0x0, 0xf192, 0x1, 0x1, 0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x9, 0xd7fd, 0x4, 0x7, 0x5, 0x945, 0xfffffffc, 0x1, 0xfffff48a, 0x5, 0x5, 0xe0, 0x4, 0x3, 0x9, 0x80000000, 0x1f, 0x200, 0x0, 0xd8b, 0x8, 0x5, 0x4, 0x6, 0x1, 0x0, 0xffffffff, 0xffff, 0x401, 0x5, 0x4, 0x7fffffff, 0x8, 0x3, 0x0, 0x3f, 0x9, 0x0, 0x9, 0x0, 0xddd3, 0x2, 0x400000, 0x8, 0x40, 0x5d96, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x0, 0xc92, 0x100, 0x5, 0x6, 0x4, 0x9, 0x6, 0x101, 0x7, 0x7fff, 0x36e, 0x20, 0x20, 0x100, 0x200, 0xd874, 0x2, 0x20000, 0xd3, 0x8001, 0x3fc000, 0x3, 0x5, 0x40, 0x5, 0x4, 0x0, 0x9, 0x9, 0xff8, 0x7fff, 0x6, 0x1, 0x80000000, 0x8, 0x9, 0xf0, 0x200, 0x9, 0x10001, 0x0, 0x4d, 0x8000, 0xcd60, 0xffffffff, 0x5, 0x4, 0x8, 0x0, 0x10000, 0x8, 0x9, 0x1f, 0x8, 0xfffffff8, 0x4, 0x6, 0x0, 0x5, 0x400, 0x4, 0x8, 0x5, 0x7, 0x8, 0x2, 0x9, 0x7f, 0xad9, 0x1, 0x7, 0x8000, 0x6, 0x2, 0x100, 0x9, 0x4, 0x1f, 0x200, 0x7, 0x2, 0x8, 0x7, 0x0, 0x8, 0x8, 0x40, 0xffffffff, 0x8, 0xfffffffc, 0x9, 0x8, 0x1, 0x8, 0xf7c, 0x9, 0x0, 0x2, 0x3, 0x10001, 0x97, 0x6, 0x9, 0x40, 0x7fff, 0xfffffff7, 0x463, 0x3, 0x2, 0x9, 0x15, 0x6, 0x0, 0xfffffffb, 0x8, 0x1, 0x4, 0xe5e, 0x7f, 0x8, 0x4, 0xfffffff9, 0x0, 0x0, 0x8, 0x1, 0x1000, 0x7ff, 0x7, 0x3f, 0xff, 0x7, 0x4592, 0x1, 0x4, 0x2, 0x91f, 0x8, 0x4, 0x1, 0x100, 0x6cc6e587, 0xfffeffff, 0x8, 0x3f, 0x6, 0x5, 0x10001, 0x80000000, 0x4, 0x4, 0x8, 0x4, 0x8, 0x8, 0x6, 0xffff7a04, 0x9, 0xe1f, 0x0, 0x7, 0x9, 0x1ff, 0x400, 0x800, 0x3, 0x8001, 0x9, 0x4, 0x0, 0x5, 0xfff, 0x5, 0x9, 0x9, 0xf4, 0xff, 0x9, 0x83, 0x1, 0x7fffffff, 0x800, 0x401, 0xe68, 0x1a, 0x8000, 0xffff, 0x368, 0x5, 0x4, 0x3, 0x7, 0x9, 0x6d, 0x1, 0x9, 0xe2, 0x3, 0x0, 0x9, 0x0, 0x10001, 0x4a6909f, 0x1c, 0x6, 0x9, 0x560, 0x6, 0x10001, 0x1f7, 0x705, 0x5, 0x1435, 0x2, 0x6, 0x1ff, 0x20, 0xfffffff8, 0x4, 0x1, 0x100, 0xfffffffa, 0x9, 0x40, 0xfffffff9, 0x4, 0x9, 0x81, 0x6f5f, 0x81, 0xff, 0x7, 0x0, 0x4, 0x5, 0x8, 0x0, 0x1, 0x6, 0x5, 0x3, 0x3ff, 0x3, 0x8, 0x9, 0x9, 0x1ff, 0x0, 0x0, 0x4, 0x3, 0x512, 0x7, 0x40, 0x1, 0x1, 0x9, 0x2, 0x2, 0x0, 0xffffed81, 0x7, 0x7, 0x1, 0x3, 0x2, 0x1, 0x9, 0xfffffffd, 0x4, 0x2, 0x2, 0x9, 0x7fff, 0x1, 0x7, 0x6, 0x7, 0x2, 0x3, 0x6, 0x4454, 0x6, 0x40dc, 0x8, 0x99ad, 0x5, 0x0, 0x1, 0x0, 0x8, 0x5, 0xdfda, 0x0, 0x100, 0x2, 0x8, 0x37800000, 0x1, 0x1, 0x81, 0xc94c, 0x5, 0x80, 0x20, 0x7, 0x4, 0x3, 0x8, 0x711, 0x3e, 0x200, 0x6, 0x4b, 0x1f, 0x8, 0x2, 0x101, 0xd2c, 0x62fd1a7, 0x0, 0x9, 0x2, 0x1, 0x9, 0x0, 0x6ea, 0x6, 0x20, 0x8, 0xfffffff9, 0x8000, 0x20, 0x720f, 0x4, 0x4, 0x2, 0x1000, 0x5587, 0x800, 0xffff, 0xc30, 0x5, 0x7, 0x4, 0x8, 0x3c6e, 0x36000000, 0x1, 0x10, 0x800, 0x7, 0xebc7, 0x5, 0x6, 0x5, 0x7, 0x5, 0x7, 0x7, 0x9, 0xffffffff, 0x0, 0x7f, 0x101, 0x1, 0x700, 0xf4a, 0x5, 0x3, 0x40, 0x7fffffff, 0x3, 0x3, 0x0, 0x7, 0x20, 0x6, 0x1, 0xfffffffd, 0x3, 0xffffffff, 0x5, 0x5, 0x6, 0x0, 0x7, 0x19, 0x9, 0x1f, 0x9, 0x800, 0x6, 0x9, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x3, 0x6, 0x1, 0x0, 0x3, 0xffffffff, 0x33, 0x0, 0x80000001, 0xdd, 0xffff, 0x80000001, 0x1, 0x8, 0x2, 0x8, 0x8, 0x1, 0x1, 0x401, 0xffffffc0, 0x8, 0x8, 0xffffd848, 0x2]}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001840)={0x0, @multicast1, @multicast2}, &(0x7f0000001880)=0xc) 03:28:43 executing program 0: ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000000)={0x3, 0x3, 0x0, 0x2, 0x0, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x7b4c8df1, 0x40040) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000000c0)={0x1, 0x2, 0x5}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r2, &(0x7f0000000140)="e5d9963b2ffeb902331a9f28aac6200f47fb0b55f435501b89bd59c0ff", 0x1d) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$snapshot(r3, &(0x7f00000001c0)=""/215, 0xd7) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1001, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x77) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r5 = fsmount(r4, 0x0, 0x83) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x6, 0x0, 0x9, 0x80, 0x0, 0x20, 0x242, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000400), 0x7}, 0x24, 0x6, 0x8, 0x9, 0x6, 0x4, 0x3, 0x0, 0x0, 0x0, 0x3f}, 0xffffffffffffffff, 0x10, r5, 0x2) bind$bt_sco(r5, &(0x7f00000004c0), 0x8) r6 = syz_open_dev$hiddev(&(0x7f0000000500), 0x5fc10fb5, 0xf2000) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000000540)={{0x3, 0x200, 0x7f, 0x9, 0x1, 0x101}, 0x2fb, [0x7, 0x8000, 0x0, 0x5, 0x8, 0x7, 0x401, 0xbeb8, 0x4bfb380, 0x7fffffff, 0x1000, 0x2, 0x3, 0x4, 0x2, 0x6, 0x9, 0x3fe, 0x8, 0x81, 0x401, 0x6, 0x3, 0x81, 0xff, 0x4, 0x3, 0x8000, 0x0, 0x3, 0x8001, 0x3f, 0x3, 0x9af, 0x3, 0x80000001, 0x891, 0x7fffffff, 0x8, 0x81, 0x1000, 0x7, 0x0, 0x5, 0x83, 0x433, 0xffff, 0x1, 0xfe, 0x1000, 0x101, 0x0, 0x4, 0x1, 0xffff, 0x32d, 0x9, 0x20, 0xffffffff, 0x7, 0x9473048, 0x3, 0x3cba, 0x1, 0x6, 0xca8c, 0x0, 0x7, 0x5, 0x80, 0x3, 0x1, 0xfd18, 0x9, 0x0, 0x5, 0x8, 0xffff, 0x3, 0x8, 0x5, 0x3, 0x6, 0x4, 0x7, 0x7, 0xfffff001, 0x74af, 0x0, 0x80000001, 0x5, 0x9, 0x400, 0x80000001, 0x1000, 0x8, 0x7, 0xffffffb1, 0x1, 0x5, 0x1, 0x1, 0x9, 0x7fff, 0x5, 0x68e, 0x400, 0x40b, 0x61, 0x7fffffff, 0xfffff65c, 0x7, 0x800, 0x3, 0xccf6, 0x3, 0x10001, 0xc0, 0x7b8, 0x80000001, 0x5, 0x1, 0x2, 0x7fffffff, 0x1, 0x1, 0x0, 0x7fffffff, 0x30, 0xd2, 0x5, 0x9, 0x31e, 0x7, 0x9, 0x0, 0x1, 0x3f, 0x6a619927, 0x3, 0x8, 0x4, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7fffffff, 0x10000, 0x7c4, 0x0, 0x101, 0x8, 0x2, 0x0, 0x3, 0x2, 0x80000000, 0xf4eb, 0x7fffffff, 0x7, 0xfff, 0x8, 0x9f, 0x81, 0x4, 0x5, 0x3, 0xffffffa0, 0x0, 0x7f, 0x7, 0x9, 0x7, 0x3, 0x7, 0x9, 0x5, 0x1, 0x81, 0x0, 0x400000, 0x6, 0x6, 0x3, 0x2457, 0x1, 0x2, 0xc2e, 0x8, 0x2, 0x7fffffff, 0x7, 0x5, 0x0, 0x54, 0x4c, 0xffffffe1, 0x0, 0x81, 0x81, 0xfffffffd, 0xffffffff, 0x1, 0x80, 0xfffff1c8, 0x9, 0x6, 0x242aff92, 0x1, 0x3, 0xffffffff, 0x10001, 0x9, 0x2, 0x80000001, 0xffffffff, 0x1000, 0x9, 0x3ff, 0xb3af, 0x5, 0x10000, 0x8f5b, 0x4, 0x0, 0x500, 0xab61, 0x2, 0xfff, 0x200, 0x5, 0x5, 0x2, 0x7f, 0x64e42e36, 0x3f, 0x5, 0xa9, 0xfffff845, 0x100000, 0x596, 0x5, 0x9, 0x0, 0x10, 0x5, 0x0, 0x2, 0xe858, 0x1, 0x0, 0x7, 0x3, 0x6, 0x5, 0x6f85, 0x7ced, 0x7, 0x5, 0x2, 0x1, 0x8, 0x6, 0x1ff, 0x9095, 0x0, 0xfffffffe, 0x8, 0x3, 0x0, 0x7ff, 0x80, 0x854b, 0xffffffd0, 0x7, 0x3, 0x81b, 0x5, 0x6c, 0x8f, 0xfffffffc, 0x40, 0x2, 0x6, 0x401, 0x5, 0x1, 0x9, 0x1, 0x3f, 0x3, 0x100, 0x2, 0x3ff, 0x7, 0x5, 0x1, 0x8, 0x80, 0x7, 0x3ff, 0x2, 0x9, 0x4e, 0x101, 0x0, 0x1, 0x2, 0x800, 0x10001, 0x2, 0x2, 0x5, 0x3, 0x2bf8, 0x40, 0x3, 0x0, 0x1, 0x6, 0x5, 0x84db, 0x2000, 0x9c, 0x7fff, 0x3, 0x0, 0xe944, 0x6, 0x7, 0x8, 0x9, 0x7ff, 0x2, 0x9, 0x2, 0x2, 0x8, 0x0, 0x1, 0x5, 0x7fff, 0x5, 0x87, 0x602, 0x0, 0x3f, 0x3, 0x800, 0x2, 0x6, 0x3ff, 0x1f, 0xffffffff, 0x3, 0x362d, 0x0, 0x3, 0x81, 0x800, 0x212, 0x6, 0xff, 0x5, 0x8000, 0x0, 0x7, 0x5a7f, 0x5, 0x1, 0x3, 0x0, 0x4, 0x80000001, 0x3f, 0x5, 0x80000001, 0x5, 0xff, 0x2, 0x6, 0xcc, 0x10001, 0x400, 0x4147, 0x4, 0x400, 0xa0c, 0x4, 0xd430, 0x6, 0x6, 0x9, 0xccac, 0x2, 0x9, 0xeca, 0x800, 0x5, 0x9, 0x4, 0x0, 0xcf75, 0x9, 0x9, 0x7, 0x8001, 0x2, 0x1, 0x0, 0x1000, 0xfff, 0x8, 0x1, 0x3, 0x8e5, 0xffffff59, 0x738, 0x8, 0x38000, 0xb4f, 0x55e3, 0x7, 0x2, 0x9, 0x5, 0x2, 0x7fff, 0x9, 0x0, 0x3, 0x10, 0x5, 0x3, 0x3, 0x7, 0x2, 0x10000, 0x6, 0x1000, 0x1, 0x8000, 0x5, 0x3, 0x2, 0x9, 0x7, 0x8000000, 0x2, 0x1ff, 0x100, 0xbf0, 0x9, 0x40, 0x849f, 0x2, 0x81, 0x3ff, 0xfffffbff, 0x7fff, 0x7fff, 0xcb, 0x10000, 0x678, 0x100, 0xfffff801, 0x1ff, 0x72, 0x4, 0x7f, 0x4, 0x9a5d, 0x8, 0x100, 0x51af, 0x8, 0x7f, 0x7c, 0x0, 0x9, 0x5, 0x2, 0x45b5, 0x5, 0x5, 0x1, 0x8, 0xffff, 0x7, 0xfffffff7, 0x2c, 0x3ff, 0x2, 0x2, 0x8001, 0x4, 0xfff, 0x7, 0xba, 0x595, 0xffffffff, 0x7f, 0x200, 0x5, 0x0, 0x2, 0x3, 0x5, 0x5, 0x4f17, 0x7, 0x4, 0x1, 0x800, 0x7, 0xffff7fff, 0x7, 0x6, 0x6, 0x7, 0x0, 0x8, 0x101, 0xffffff00, 0xbab5, 0x6, 0x3, 0xa6, 0x8, 0x4, 0x104, 0x2c8500, 0x1, 0x7, 0x8, 0x7fffffff, 0x9, 0x81, 0x0, 0x9, 0x5, 0x5, 0x100, 0x1, 0x99b4, 0x0, 0x4, 0x100, 0x5, 0xd642, 0x52, 0xe2945d, 0x4, 0x20, 0x8, 0x1, 0x80, 0x40, 0x0, 0x399f, 0x9, 0x8, 0x6d, 0xc04, 0x3f, 0x2, 0x3, 0xa8, 0x7, 0x8, 0x8, 0x40, 0xffffffff, 0x5, 0x7fff, 0x81, 0xffffff00, 0x7fff, 0xd18, 0x2, 0x0, 0xe9, 0x7fffffff, 0x0, 0x4, 0x9, 0x401, 0xe00, 0xfffffff7, 0x7, 0x800, 0x9, 0xffffffff, 0x7, 0x4, 0x21e, 0x400, 0xfffffffd, 0xffffffff, 0x40, 0x7, 0x8, 0x6, 0x9, 0x5, 0x8, 0x2, 0x6, 0x6, 0x5, 0xd7b3, 0x20, 0x8, 0x5, 0x0, 0x7fff, 0x5, 0x5, 0x5, 0x8, 0x6, 0x2, 0xfffffff2, 0x4, 0x8, 0x1, 0xffffffff, 0x1, 0x2, 0x3, 0x4, 0x0, 0x3, 0x6, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xfffffbff, 0xffffff7f, 0x1, 0x0, 0x5f, 0x200, 0xcb, 0x6, 0x7, 0x1, 0x4, 0xcbe, 0x0, 0x3, 0xc6e9, 0x2, 0x2, 0x7fff, 0xb02, 0x46, 0x6, 0x7, 0x4, 0x6, 0x800, 0x292, 0x0, 0x800, 0x9, 0x80000000, 0x0, 0x2, 0xfd, 0xb18, 0x370d28c4, 0x9, 0xffffffff, 0x800, 0xb860, 0x3, 0x1, 0x9, 0x5, 0x4, 0x4, 0x7f, 0x4, 0x7f, 0x81, 0x8, 0xd1a9, 0x0, 0x57, 0x4, 0x3, 0x6, 0x8000, 0x0, 0x6, 0x8001, 0x0, 0xffffffff, 0xfffffffd, 0x1, 0x8, 0x3, 0x5, 0xc0000000, 0xfff, 0xac, 0x1f, 0x101, 0x3, 0x3ff, 0x1, 0x7, 0x1000, 0x80000000, 0x8, 0x0, 0x10001, 0x0, 0xd0, 0x6, 0x7, 0x3, 0x1b1e, 0x1, 0x5, 0xfffffffd, 0x0, 0x8, 0x4, 0x7fff, 0xa1a6, 0x81, 0xd407, 0x4, 0x4, 0x1f, 0x1ff, 0x5, 0xa5c, 0x2, 0x7, 0x3, 0x3, 0x4, 0x8, 0xfa, 0xc2a, 0x401, 0x8, 0x20, 0x400, 0x368dd918, 0x80000000, 0x7, 0x6103c46d, 0x2, 0x78, 0x0, 0x8, 0xe7, 0x0, 0x3, 0x80000001, 0x1ff, 0x500, 0x81, 0x7d, 0x0, 0x70000, 0x6, 0x0, 0xd1, 0xffff893f, 0x7, 0x0, 0x2, 0x1, 0xfffffeff, 0x6, 0x82, 0x5, 0x80, 0x9, 0xd6e, 0x70d5, 0x8, 0xfffffff8, 0x2, 0x80000000, 0x2, 0x10001, 0xffffffff, 0x8, 0x8, 0x40, 0xff, 0x2, 0xffffffff, 0x1c, 0x80000000, 0x8000, 0x5, 0x40, 0x10000, 0x401, 0x5, 0x6, 0x200, 0xffffffe0, 0x6, 0x6, 0x1, 0x5aa, 0x2, 0xffffffff, 0x20, 0x20eef9e0, 0x80000000, 0x9, 0x800, 0x800, 0x3, 0x2, 0x2, 0x3, 0x100, 0x3, 0x3, 0x8001, 0xab16a4d3, 0x1fff, 0x4, 0x6, 0x80000001, 0x10000, 0x2, 0x2, 0xb1f166b, 0x3, 0x8, 0x4, 0x4, 0x8, 0x7, 0xffffffff, 0xd1, 0x8, 0x6, 0x800, 0x1, 0xfff, 0xffffffff, 0x0, 0xfffffff7, 0x5, 0x8, 0x4, 0x8, 0x8, 0x7aaa30a8, 0x101, 0x8, 0x7ff, 0x9, 0x8, 0x19f, 0x3, 0xbbb6, 0x1000, 0x7ff, 0x0, 0x3ff, 0x100, 0x1, 0x9, 0x0, 0x0, 0x9, 0x88e8, 0x1, 0x453c, 0x0, 0x1, 0x400, 0x0, 0x2, 0xda, 0x7, 0x3ff, 0xfffffbff, 0x7, 0x7, 0x10000, 0x4, 0x80, 0x7fffffff, 0x9, 0x401, 0x81, 0x1ff, 0x6, 0x8, 0x5, 0x4607, 0x9, 0x7, 0xff, 0x7fffffff, 0x6, 0x400, 0x9, 0x0, 0x800, 0x7, 0x5, 0x80000001, 0x9, 0x5, 0x6, 0x8, 0x2, 0x9721, 0x9, 0x8, 0x0, 0x400, 0x200, 0x4, 0x2, 0x5, 0xffff, 0x9, 0x3f, 0x1, 0x8001, 0x8, 0x7, 0xb47, 0x9, 0x6, 0x9, 0x9, 0x5, 0x3, 0x10001, 0xffffffff, 0x4, 0x3, 0x1, 0x7, 0x200, 0x7, 0x3, 0x4, 0x1, 0x7fffffff, 0x5, 0x7f, 0x4, 0x81, 0x0, 0x200, 0x0, 0x5, 0x800, 0x4, 0x7, 0x6, 0x3, 0x9, 0x5, 0x401, 0x80000000, 0x1ff, 0xfffffffc, 0x5, 0xffffffff, 0xfff, 0x2, 0x9, 0x6, 0x1000, 0x90, 0xb391, 0x3, 0x81, 0x17, 0x0, 0x1, 0x6, 0x5, 0x4, 0xffff, 0x9, 0x3, 0xba, 0x1, 0x10001, 0xffffffff, 0x2, 0x4f43, 0x11, 0x40, 0x1000000, 0x10000, 0x9, 0x8, 0x6, 0xffffa48e, 0x0, 0x7, 0x1000, 0x7fffffff, 0x3, 0x7, 0x3, 0x4, 0x1, 0xe00, 0x3ff]}) r7 = fsmount(r5, 0x1, 0x5) read$snapshot(r7, &(0x7f0000001580)=""/94, 0x5e) 03:28:43 executing program 6: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0xdf, 0x75, 0x2, {0xd4, "b275d947f5f8de0d9e8e74b350e3d6b6b5f0f28b685f9798d1424413b696397acccdca8a9b612efaf1e0971c4723dac113fdc6df952912f2168cb3815f103424f08a651c6507b96983cf64a6a71fb3c2023980b193fc04202c65a4479ee0f019d6fc8917c3b4c075915460b88b3204c0da5c8e9d07f75721ccafbcde84ec0b9dc5c2a246bfe79d54b0d7468a6040b609e784070f7219e9e7d29ea12a742e8883bcb0567530400c8c96f2512390b927453dd71a9f090467d6c6335464cff68a39dd99b332c0161f07fc3c2e13d0b1358cdc20a092"}}, 0xdf) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0xde1a, 0xfff, {0x20, 0x4, 0x8}, 0x4a000000, 0x20, 0x8ee, 0x6, 0x2, ')&', 0x1, '!', 0x1, '#', 0x2, '%$'}, 0x1, '\\', 0xffffffffffffffff, 0xee01}}, 0x4f) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x1, 0x2, 0x3}}, 0x14) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000280)={0x9, 0x7, 0x1}, 0x9) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x33, 0x2}, 0x7) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104800) write$P9_RLERRORu(r0, &(0x7f0000000340)={0xe, 0x7, 0x2, {{0x1, '\\'}, 0x9a74}}, 0xe) write$P9_RLERRORu(r0, &(0x7f0000000380)={0xe, 0x7, 0x1, {{0x1, '#'}, 0x9}}, 0xe) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCLUNK(r2, &(0x7f0000000400)={0x7, 0x79, 0x2}, 0x7) r3 = memfd_secret(0x80000) write$P9_RXATTRWALK(r3, &(0x7f0000000440)={0xf, 0x1f, 0x2, 0x9}, 0xf) write$P9_RREADDIR(r0, &(0x7f0000000480)={0x122, 0x29, 0x1, {0x4, [{{0x80, 0x1, 0x4}, 0x7f, 0x2d, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x5, 0x6, 0x7, './file0'}, {{0x4, 0x3, 0x6}, 0x7, 0x6, 0x7, './file0'}, {{0x43, 0x0, 0x4}, 0xffffffffffffff01, 0x8, 0x7, './file0'}, {{0x4, 0x4, 0x2}, 0x286, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x2, 0x1}, 0x1000, 0x7, 0x7, './file0'}, {{0x20, 0x0, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x1, 0x3}, 0x6, 0x4, 0x7, './file0'}]}}, 0x122) write$P9_RREAD(r1, &(0x7f00000005c0)={0x4b, 0x75, 0x1, {0x40, "43747de04873d2a8d07cd050afe9ca3658dcc402633223e2dc04ee32b81f68c81d136033b36631cc325407d42c3f8aebec81cd4d12a6caf677f5f80b63a1c4e6"}}, 0x4b) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7b, 0x1}, 0x7) 03:28:43 executing program 3: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x13) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x801, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x801, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x2012, {0x10, 0x4}, 0x4, r1, 0xee00, 0x1ff, 0x2, 0x9f61, 0x5, 0xa7, 0x6, 0x3ff, 0x1f, 0x99c0, 0x8, 0xffffffffffff5187, 0x2, 0x0, 0x1, 0x1}}, 0xa0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x11, 0xffffffffffffffff, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x4) write$9p(r2, &(0x7f0000000200)="f9a9a031e9c6d7330a1c7d7631fd7c2cdeb990da580ef35434e15f7fc64a1b034a53dec3e6bfbd08f61edcded7235e6a400caac65e72f4ef53fdd810480ef44ed2882f6bf8548217f6b8a7b8646c9eb201f6308a61f873da6b45ee98f4816c9e81ce35", 0x63) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x38, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x2}, @dead_binder_done, @exit_looper, @enter_looper, @decrefs, @decrefs={0x40046307, 0x2}, @dead_binder_done], 0xac, 0x0, &(0x7f00000002c0)="b799bfcff98c13a7bd71282828b8536f78053eb55baa53c9b4d40e3a578d3d55d2db48f403b7b6c98054e0eb84bad2fcb5edaeeaba37f6ec98b57e1454a8a1198a413fa75cd74b0265b13701a8a8657c6bdf186c84c2a42234aba88120f7fc4db65807b86c684ee445597403c11a3da9df9bf6c0fbd4676c9ce6678933b2866af584a60990392003849471a848bfa5fd04487826809d11bafbde6e825c3e86778ec05640479b3c10ed5d2272"}) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000003c0)=0x7, 0x4) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000400)={0x3, 0x2, 0x8}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x308}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44000}, 0x800) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x8000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x29, 0x51, 0x5, 0x7, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x80, 0x54d, 0x5}}) 03:28:43 executing program 4: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) r0 = memfd_secret(0x0) write$P9_RSTAT(r0, &(0x7f0000000040)={0x48, 0x7d, 0x1, {0x0, 0x41, 0x9, 0xf40, {0x20, 0x0, 0x8}, 0x81810000, 0x9, 0x1, 0x5, 0x7, '$[@#})&', 0x0, '', 0x5, '\\*,,)', 0x2, '.!'}}, 0x48) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x400) write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000140)) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x80, 0x3, 0x3}}, 0x14) io_setup(0x4, &(0x7f00000001c0)) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) write$P9_RVERSION(r0, &(0x7f0000000280)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f00000002c0)={0x8, 0x40e}) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000440)) 03:28:43 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x20}, 0x8001}}, 0x18) r1 = memfd_secret(0x0) write$P9_RVERSION(r1, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) write$P9_RCLUNK(r1, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x1, 0x0, 0x6}}, 0x14) r2 = memfd_secret(0x0) write$P9_RWALK(r2, &(0x7f0000000140)={0x8b, 0x6f, 0x2, {0xa, [{0x1, 0x1, 0x8}, {0x2, 0x3, 0x6}, {0x2, 0x3, 0x4}, {0x80, 0x2, 0x6}, {0x10, 0x2, 0x5}, {0x0, 0x3, 0x3}, {0x10, 0x0, 0x8}, {0x80, 0x3, 0x3}, {0x80, 0x4, 0x5}, {0x4, 0x2, 0x5}]}}, 0x8b) write$P9_RLOCK(r1, &(0x7f0000000200)={0x8, 0x35, 0x2, 0x3}, 0x8) write$P9_RCLUNK(r0, &(0x7f0000000240)={0x7, 0x79, 0x1}, 0x7) r3 = fsmount(r1, 0x1, 0xe1) write$P9_RSYMLINK(r3, &(0x7f0000000280)={0x14, 0x11, 0x2, {0x80, 0x2, 0x6}}, 0x14) write$P9_RCLUNK(r3, &(0x7f00000002c0)={0x7, 0x79, 0x1}, 0x7) write$P9_RREADDIR(r2, &(0x7f0000000300)={0xc5, 0x29, 0x1, {0x4, [{{0x8, 0x2, 0x6}, 0x400, 0x81, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x1, 0x7, 0x7, './file0'}, {{0x10, 0x2, 0x5}, 0x7, 0x9, 0x7, './file0'}, {{0x4, 0x4, 0x5}, 0x5, 0x7f, 0x7, './file0'}, {{0x20, 0x1, 0x1}, 0x8, 0x20, 0x7, './file0'}, {{0x0, 0x2, 0x1}, 0x81, 0x80, 0x7, './file0'}]}}, 0xc5) write$P9_RXATTRWALK(r0, &(0x7f0000000400)={0xf, 0x1f, 0x2, 0x1f}, 0xf) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) 03:28:43 executing program 6: write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x4b, 0x2}, 0x7) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)={0xdf, 0x75, 0x2, {0xd4, "b275d947f5f8de0d9e8e74b350e3d6b6b5f0f28b685f9798d1424413b696397acccdca8a9b612efaf1e0971c4723dac113fdc6df952912f2168cb3815f103424f08a651c6507b96983cf64a6a71fb3c2023980b193fc04202c65a4479ee0f019d6fc8917c3b4c075915460b88b3204c0da5c8e9d07f75721ccafbcde84ec0b9dc5c2a246bfe79d54b0d7468a6040b609e784070f7219e9e7d29ea12a742e8883bcb0567530400c8c96f2512390b927453dd71a9f090467d6c6335464cff68a39dd99b332c0161f07fc3c2e13d0b1358cdc20a092"}}, 0xdf) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0xde1a, 0xfff, {0x20, 0x4, 0x8}, 0x4a000000, 0x20, 0x8ee, 0x6, 0x2, ')&', 0x1, '!', 0x1, '#', 0x2, '%$'}, 0x1, '\\', 0xffffffffffffffff, 0xee01}}, 0x4f) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x1, 0x2, 0x3}}, 0x14) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000280)={0x9, 0x7, 0x1}, 0x9) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x33, 0x2}, 0x7) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x104800) write$P9_RLERRORu(r0, &(0x7f0000000340)={0xe, 0x7, 0x2, {{0x1, '\\'}, 0x9a74}}, 0xe) write$P9_RLERRORu(r0, &(0x7f0000000380)={0xe, 0x7, 0x1, {{0x1, '#'}, 0x9}}, 0xe) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCLUNK(r2, &(0x7f0000000400)={0x7, 0x79, 0x2}, 0x7) r3 = memfd_secret(0x80000) write$P9_RXATTRWALK(r3, &(0x7f0000000440)={0xf, 0x1f, 0x2, 0x9}, 0xf) write$P9_RREADDIR(r0, &(0x7f0000000480)={0x122, 0x29, 0x1, {0x4, [{{0x80, 0x1, 0x4}, 0x7f, 0x2d, 0x7, './file0'}, {{0x8, 0x3, 0x5}, 0x5, 0x6, 0x7, './file0'}, {{0x4, 0x3, 0x6}, 0x7, 0x6, 0x7, './file0'}, {{0x43, 0x0, 0x4}, 0xffffffffffffff01, 0x8, 0x7, './file0'}, {{0x4, 0x4, 0x2}, 0x286, 0x1, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x2, 0x1}, 0x1000, 0x7, 0x7, './file0'}, {{0x20, 0x0, 0x3}, 0x2, 0x0, 0x7, './file0'}, {{0x4, 0x1, 0x3}, 0x6, 0x4, 0x7, './file0'}]}}, 0x122) write$P9_RREAD(r1, &(0x7f00000005c0)={0x4b, 0x75, 0x1, {0x40, "43747de04873d2a8d07cd050afe9ca3658dcc402633223e2dc04ee32b81f68c81d136033b36631cc325407d42c3f8aebec81cd4d12a6caf677f5f80b63a1c4e6"}}, 0x4b) [ 187.843571] Bluetooth: hci2: command 0x0406 tx timeout [ 187.844362] Bluetooth: hci1: command 0x0406 tx timeout [ 187.845162] Bluetooth: hci0: command 0x0406 tx timeout [ 187.845920] Bluetooth: hci3: command 0x0406 tx timeout [ 187.846663] Bluetooth: hci5: command 0x0406 tx timeout [ 187.878837] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.879963] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.880834] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.881935] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.883382] Call Trace: [ 187.884284] [ 187.884628] __schedule+0x893/0x2470 [ 187.885638] ? io_schedule_timeout+0x150/0x150 [ 187.886300] ? do_raw_spin_lock+0x121/0x260 [ 187.886932] ? rwlock_bug.part.0+0x90/0x90 [ 187.887553] schedule+0xda/0x1b0 [ 187.888051] rescuer_thread+0x851/0xdb0 [ 187.888653] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.889352] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.890094] ? lockdep_hardirqs_on+0x79/0x100 [ 187.890757] ? worker_thread+0x1260/0x1260 [ 187.891340] kthread+0x2ed/0x3a0 [ 187.891848] ? kthread_complete_and_exit+0x40/0x40 [ 187.892541] ret_from_fork+0x22/0x30 [ 187.893071] [ 187.893390] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.894267] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.894998] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.896025] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.897158] Call Trace: [ 187.897546] [ 187.897858] __schedule+0x893/0x2470 [ 187.898359] ? io_schedule_timeout+0x150/0x150 [ 187.899012] ? do_raw_spin_lock+0x121/0x260 [ 187.899696] ? rwlock_bug.part.0+0x90/0x90 [ 187.900347] schedule+0xda/0x1b0 [ 187.900903] rescuer_thread+0x851/0xdb0 [ 187.901549] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.902301] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.903087] ? lockdep_hardirqs_on+0x79/0x100 [ 187.903789] ? worker_thread+0x1260/0x1260 [ 187.904470] kthread+0x2ed/0x3a0 [ 187.904973] ? kthread_complete_and_exit+0x40/0x40 [ 187.905747] ret_from_fork+0x22/0x30 [ 187.906336] [ 187.906715] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.907717] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.908510] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.909683] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.910921] Call Trace: [ 187.911306] [ 187.911685] __schedule+0x893/0x2470 [ 187.912249] ? io_schedule_timeout+0x150/0x150 [ 187.912909] ? do_raw_spin_lock+0x121/0x260 [ 187.913603] ? rwlock_bug.part.0+0x90/0x90 [ 187.914241] schedule+0xda/0x1b0 [ 187.914775] rescuer_thread+0x851/0xdb0 [ 187.915379] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.916171] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.916954] ? lockdep_hardirqs_on+0x79/0x100 [ 187.917649] ? worker_thread+0x1260/0x1260 [ 187.918296] kthread+0x2ed/0x3a0 [ 187.918832] ? kthread_complete_and_exit+0x40/0x40 [ 187.919559] ret_from_fork+0x22/0x30 [ 187.920144] [ 187.920529] INFO: task netns:6 blocked for more than 143 seconds. [ 187.921465] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.922221] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.923334] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.924586] Call Trace: [ 187.924970] [ 187.925319] __schedule+0x893/0x2470 [ 187.925920] ? io_schedule_timeout+0x150/0x150 [ 187.926636] ? do_raw_spin_lock+0x121/0x260 [ 187.927231] ? rwlock_bug.part.0+0x90/0x90 [ 187.927888] schedule+0xda/0x1b0 [ 187.928409] rescuer_thread+0x851/0xdb0 [ 187.929043] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.929807] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.930575] ? lockdep_hardirqs_on+0x79/0x100 [ 187.931247] ? worker_thread+0x1260/0x1260 [ 187.931907] kthread+0x2ed/0x3a0 [ 187.932418] ? kthread_complete_and_exit+0x40/0x40 [ 187.933174] ret_from_fork+0x22/0x30 [ 187.933792] [ 187.934134] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.935111] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.935886] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.937028] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 187.938253] Workqueue: 0x0 (kblockd) [ 187.938842] Call Trace: [ 187.939199] [ 187.939559] __schedule+0x893/0x2470 [ 187.940133] ? io_schedule_timeout+0x150/0x150 [ 187.940855] schedule+0xda/0x1b0 [ 187.941380] worker_thread+0x15f/0x1260 [ 187.942030] ? process_one_work+0x16a0/0x16a0 [ 187.942740] kthread+0x2ed/0x3a0 [ 187.943241] ? kthread_complete_and_exit+0x40/0x40 [ 187.943968] ret_from_fork+0x22/0x30 [ 187.944561] [ 187.944915] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.945902] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.946701] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.947827] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 187.949029] Call Trace: [ 187.949422] [ 187.949781] __schedule+0x893/0x2470 [ 187.950336] ? io_schedule_timeout+0x150/0x150 [ 187.951045] ? do_raw_spin_lock+0x121/0x260 [ 187.951667] ? rwlock_bug.part.0+0x90/0x90 [ 187.952309] schedule+0xda/0x1b0 [ 187.952857] rescuer_thread+0x851/0xdb0 [ 187.953466] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.954195] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.954937] ? lockdep_hardirqs_on+0x79/0x100 [ 187.955622] ? worker_thread+0x1260/0x1260 [ 187.956234] kthread+0x2ed/0x3a0 [ 187.956799] ? kthread_complete_and_exit+0x40/0x40 [ 187.957574] ret_from_fork+0x22/0x30 [ 187.958136] [ 187.958523] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.959550] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.960280] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.961395] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.962632] Call Trace: [ 187.962992] [ 187.963323] __schedule+0x893/0x2470 [ 187.963963] ? io_schedule_timeout+0x150/0x150 [ 187.964697] ? mark_held_locks+0x9e/0xe0 [ 187.965336] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.966084] schedule+0xda/0x1b0 [ 187.966610] rcu_tasks_one_gp+0x3db/0xc10 [ 187.967272] rcu_tasks_kthread+0x80/0xa0 [ 187.967880] ? rcu_tasks_postscan+0x10/0x10 [ 187.968535] kthread+0x2ed/0x3a0 [ 187.969021] ? kthread_complete_and_exit+0x40/0x40 [ 187.969775] ret_from_fork+0x22/0x30 [ 187.970361] [ 187.970754] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 187.971747] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.972548] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.973668] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 187.975011] Workqueue: 0x0 (rcu_gp) [ 187.975697] Call Trace: [ 187.976068] [ 187.976400] __schedule+0x893/0x2470 [ 187.977030] ? io_schedule_timeout+0x150/0x150 [ 187.977797] ? rwlock_bug.part.0+0x90/0x90 [ 187.978417] schedule+0xda/0x1b0 [ 187.978968] worker_thread+0x15f/0x1260 [ 187.979599] ? process_one_work+0x16a0/0x16a0 [ 187.980226] kthread+0x2ed/0x3a0 [ 187.980758] ? kthread_complete_and_exit+0x40/0x40 [ 187.981517] ret_from_fork+0x22/0x30 [ 187.982059] [ 187.993489] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.994510] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.995227] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.996301] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 187.997510] Workqueue: 0x0 (events_highpri) [ 187.998155] Call Trace: [ 187.998572] [ 187.998906] __schedule+0x893/0x2470 [ 187.999495] ? io_schedule_timeout+0x150/0x150 [ 188.000171] schedule+0xda/0x1b0 [ 188.000740] worker_thread+0x15f/0x1260 [ 188.001356] ? process_one_work+0x16a0/0x16a0 [ 188.002042] kthread+0x2ed/0x3a0 [ 188.002581] ? kthread_complete_and_exit+0x40/0x40 [ 188.003283] ret_from_fork+0x22/0x30 [ 188.003895] [ 188.004236] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 188.005228] Not tainted 6.0.0-rc7-next-20220930 #1 [ 188.005951] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 188.007025] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 188.008226] Call Trace: [ 188.008672] [ 188.009007] __schedule+0x893/0x2470 [ 188.009638] ? io_schedule_timeout+0x150/0x150 [ 188.010296] ? do_raw_spin_lock+0x121/0x260 [ 188.010978] ? rwlock_bug.part.0+0x90/0x90 [ 188.011649] schedule+0xda/0x1b0 [ 188.012156] rescuer_thread+0x851/0xdb0 [ 188.012828] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.013582] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 188.014274] ? lockdep_hardirqs_on+0x79/0x100 [ 188.014951] ? worker_thread+0x1260/0x1260 [ 188.015584] kthread+0x2ed/0x3a0 [ 188.016054] ? kthread_complete_and_exit+0x40/0x40 [ 188.016787] ret_from_fork+0x22/0x30 [ 188.017349] [ 188.017788] [ 188.017788] Showing all locks held in the system: [ 188.018889] 1 lock held by rcu_tasks_kthre/11: [ 188.019554] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 188.021191] 1 lock held by khungtaskd/25: [ 188.021811] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 188.023315] 1 lock held by in:imklog/209: [ 188.023898] 3 locks held by syz-executor/5451: [ 188.024540] [ 188.024779] ============================================= [ 188.024779] VM DIAGNOSIS: 03:28:44 Registers: info registers vcpu 0 RAX=0000000080000101 RBX=0000000000000001 RCX=1ffffffff0e0c0d8 RDX=0000000000000000 RSI=ffff888008647908 RDI=0000000000000001 RBP=ffff888008647990 RSP=ffff888008647850 R8 =ffffffff85e41d80 R9 =ffffffff85e41d84 R10=ffffed10010c8f34 R11=ffff888008647978 R12=ffffed10010c8f29 R13=ffffed10010c8f28 R14=ffff888008647938 R15=ffff888008647938 RIP=ffffffff8120506a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2ae8a36ae0 CR3=000000000f2e6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 000000000000002f 002f2e2e2f002e2e YMM01=0000000000000000 0000000000000000 0000000000000000 696c61766e49002f YMM02=0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 YMM03=0000000000000000 0000000000000000 0000000000000000 00005587b400302f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 00005587b428f050 00005587b4298080 YMM06=0000000000000000 0000000000000000 00005587b4264270 0000000200000004 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 2f63697361622f63 72732f2e2e000d0a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000005f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=000000000000005f R11=0000000000000001 R12=000000000000005f R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd9b8bd080 CR3=000000000f0d8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4153563800000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000