Warning: Permanently added '[localhost]:42380' (ECDSA) to the list of known hosts. 2026/01/17 22:37:50 fuzzer started 2026/01/17 22:37:50 dialing manager at localhost:42157 syzkaller login: [ 45.601573] cgroup: Unknown subsys name 'net' [ 45.684734] cgroup: Unknown subsys name 'cpuset' [ 45.705380] cgroup: Unknown subsys name 'rlimit' 2026/01/17 22:38:02 syscalls: 261 2026/01/17 22:38:02 code coverage: enabled 2026/01/17 22:38:02 comparison tracing: enabled 2026/01/17 22:38:02 extra coverage: enabled 2026/01/17 22:38:02 setuid sandbox: enabled 2026/01/17 22:38:02 namespace sandbox: enabled 2026/01/17 22:38:02 Android sandbox: enabled 2026/01/17 22:38:02 fault injection: enabled 2026/01/17 22:38:02 leak checking: enabled 2026/01/17 22:38:02 net packet injection: enabled 2026/01/17 22:38:02 net device setup: enabled 2026/01/17 22:38:02 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/17 22:38:02 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/17 22:38:02 USB emulation: enabled 2026/01/17 22:38:02 hci packet injection: enabled 2026/01/17 22:38:02 wifi device emulation: enabled 2026/01/17 22:38:02 802.15.4 emulation: enabled 2026/01/17 22:38:02 fetching corpus: 0, signal 0/0 (executing program) 2026/01/17 22:38:04 starting 8 fuzzer processes 22:38:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x20, 0x10, [0x21e, 0xfff, 0x4800000000000000, 0x4], &(0x7f0000000040)=[0x0, 0x0]}) r1 = signalfd(r0, &(0x7f00000000c0)={[0x4]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000280)={0x1, 0x2, 0x1000, 0xd5, &(0x7f0000000140)="59cb330443f7354e6fa5160fde1f47c6128f5de475cd37cec035010d8221e137441b65fa4d45625772f98235cb68ee364d0268bba782fa2821115723ffb108c25553d042077c0cc542059466d7d8fd34c61961abd05cc6967912f03245b6708499b7ddc4bcf67b6f529e7a73f74bfd09f848f3788e4f6d0483bf098dcc6bc2d50e144b5229cf7494606427b68d6bb709dd76a0d9b00767bed5e1bbbc0545c7e3709ca331a002576efddba56b47b29250a9e6a6399210ce1c5a4365e98a1a8d0a12be95f79a3d4634d9393b470f3c20b832fe5cc0f0", 0x17, 0x0, &(0x7f0000000240)="17817e767d8c5e72bb44aa870ea0da5bdee6c83e4ba973"}) r3 = accept(r2, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000380)=0x80) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) r5 = syz_open_dev$vcsn(&(0x7f0000000440), 0x9148, 0x200) r6 = pidfd_open(0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000000480)={r6}) r7 = epoll_create1(0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f00000004c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000500)={0x10000000}) r8 = syz_open_dev$vcsn(&(0x7f0000000540), 0x7fffffff, 0x109040) openat$cgroup_pressure(r8, &(0x7f0000000580)='cpu.pressure\x00', 0x2, 0x0) copy_file_range(r2, &(0x7f00000005c0)=0x5, r3, &(0x7f0000000600)=0x4, 0x4, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) getgroups(0x6, &(0x7f00000007c0)=[0x0, 0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xee01]) fsetxattr$system_posix_acl(r4, &(0x7f0000000640)='system.posix_acl_default\x00', &(0x7f0000000b80)={{}, {0x1, 0x7}, [{0x2, 0x2, r9}], {0x4, 0x4}, [{0x8, 0x1, 0xee01}, {0x8, 0x4}, {0x8, 0x4, r10}, {0x8, 0x1}, {0x8, 0x1, 0xee01}, {0x8, 0x6}], {0x10, 0x1}, {0x20, 0x1}}, 0x5c, 0x1) 22:38:04 executing program 0: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x2, 0x1000, 0x69, &(0x7f0000000040)="88720888968c9d686445f0d367d501c48edd3a3f40e50ac723ebf985dd5f739a3ee8ad6b1ca789d5829066f0dd584e19320d3070be3a79234254d1c3cfb771a1b329185859decaed7c77512af415c9e30f19e2e43c300ba5fda9c723da365ef0c980ce931bd1107bd9", 0x5d, 0x0, &(0x7f00000000c0)="58e40d14bd70bdaa7153b02d9fdc6b7898e12ed8f32f50b5a60ec7ac56c9b38025cfccc3623b7b4b4b1b466053842106af54137b475f1bacd22742f4388b2669766b55ee258a509e07ab885f37cdd8a9a8f68a8b9de1b3cf61b2d2f05d"}) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000001c0)={r0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCINITREPORT(r2, 0x4805, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000240)={r1}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[r1, r0, r2, r2], 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r3, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5ac6, 0x8}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x44000) r4 = getpgrp(0xffffffffffffffff) r5 = pidfd_open(r4, 0x0) readahead(0xffffffffffffffff, 0x6, 0x6) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000480)={&(0x7f0000000400)=""/124, 0x7c, 0x1, 0x3}) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000500)={0x100000000, 0x28, [0xffffffff, 0x7f1, 0x7ff, 0x3d], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = dup2(r7, r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r8, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) pwritev(r1, &(0x7f0000000b40)=[{&(0x7f0000000680)="8b3ba29f5b81d2bf2725cf88d49e223e0149480c46f5b77314e3aad16163431081bf3c88b570924e1fd74c35c4000c625181ade404fa0afcd2176110e1806ee0", 0x40}, {&(0x7f00000006c0)="fe59135d5f441ee3f5712849f3ac76b883816f5b7618108d", 0x18}, {&(0x7f0000000700)="33d08137fcd492c475516298f24376b17f9f97e9ff51d635b6c0d37d0bc38a60e37d4668ba451f0f1b0568d3f32dc10bed99118260f9963ac20dd5e37a1f80b9edc9f1d74cd67f93a78acbda699d143d0735cd4ffe611d2e44c6", 0x5a}, {&(0x7f0000000780)="13e62040a8f8b82eb64d33624081f7fbbd08390652c96e00cd7e6b9ef1473507587ab4fde046060153d6d72b7f0088e8b61c3ee24e5bb5b53bf8b0cce5d555d0117838d32237fe03e7b09a08716d617b2c3c8ca7a7014d6ffb51eabf0b5385bce5cc86ed034c54896eb708b2f91af1bca426fe99914e96c9db40715378919831e5061f76d372f896d1ba210235967bae8836d42c519dafc9562811ea1c123a56d280d655936fd85225c9ecfba9954c098d2c3b088b380728de89a5a50cb88d95d064df7d23ed0854bb73259cb27a5a8908a104b37b3df6a89a95", 0xda}, {&(0x7f0000000880)="aee421d923e3f4949a24621c2bf5fb79bd381058db001030b0fb850132ee12034c03ab1d72ecb116ffc1356a980f6ea5ff4e9e61f6d409507f30c2806295f0c4e1fe8b68ce37d2f0d1942c46603b8ada5e9f0a6a7c9025ae5d4fc232bfe557bacd563cd339310682f8a9579c20a39f8999a748b8c6fac815e5995d", 0x7b}, {&(0x7f0000000900)="7df8c2a30b7d65b6ac6db044403db88f619360d90f13ce257559025b97e48a28a7ece9d10a19548024ac5e14aa74596e1128a0127633697a964cb4150055e54accc691e97dc2264414b78d3f4f24d7fbd11142e2c22b70a21456ddb8e5991b805f0f8d401d6af0704b8a4a748fdd4e1cf3c4e405c25ad17141cea49bec59b57d216fc9db6b6a890fe4f8f055f402adf3ad289992da92026dd7a00a53a7e48b866c", 0xa1}, {&(0x7f00000009c0)="652ab30fd09268acd017c6a840749b3f4722cff18c4900fe120ba04fcf42230b1129c1da514fb93a76e2907e9b5998d52c4d74bcd1e373328dc281224860bed8bf8a23695a1786aa2642c6", 0x4b}, {&(0x7f0000000a40)="9537f450104166d4d1f70b75ca6469391974bb2ed907a3c0cd1350aa4321e1fef0bd", 0x22}, {&(0x7f0000000a80)="6c0976dbb011bea85680a8c967318ac8cb05bb6003ae6ebcb5a8a875d288265836cf7f621450a2252553e77e7123ee6b3d9cce4bb7fdb0f0edbc39270d16b94eceec1605fc3ba00f96072497fec88eb15ea661ab66269ca1cd797a0049e5446989019a201450d04ea195845d16ebc8794744b4c73b6da67ab8b3b8ea7864a13fb56181a8baac1d13980fbf62f0655a69570147795d7871d18630016093d89266bb9a089a908b59bd6cb5f802300fab014c157a5154ba", 0xb6}], 0x9, 0xfffffffd, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000cc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, 0x0, 0xd04, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24000890) 22:38:04 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="ed0f0e19b6e6f636f1a8f4ee708f20fb3cd2016a50d22d14302a16271867e1d8ec23726a72d075a414bcb48af9fba774812856a9d5f82794574b1d571633609bfd163963161a716fe98f269501fd2efe4ac92ed868201fa5855e6b80ae062bcf88185a6ccf1b52d3f42b347d90ac5a4155bd9127f219567619", 0x79}, {&(0x7f0000000100)="b445aa9a8aca6aef5c781fed98e23ac94b54a7e349df34fa737841eb583a08f8d294b17d7fb37bcf754160ae76a17568f2fa49c0ee0c26f571040d621b4924f2267619fed34189a3a897ce40e3024fda971bf74e373042392fe89054db671f1a7ae362c943ad342aa9a9014cd780fc5124b213b840f718880845e081ec59ec14136229c0ba2345e6baacec4be2b100e761", 0x91}, {&(0x7f00000001c0)="9c7227327a062a8b7b55037716465a5d155f99d7dbba0617ee6be427b5702eda41193e09987ec75fe2f76a0658f48a6b939de64220c5b29caa9452cbd8e1fa48ca8771e57a0931df67dfa7a51ef78493b5d5704e7d1ddb9eba", 0x59}, {&(0x7f0000000240)="3a8f18a3cfcb7722bd932780406f9cce21d346bb9d61b902fb088126fca4ff6d3acc5ff30a940c1bd4ae85321d4236bc970adb4cc7ed643ec131a20cd4bc44ce28bcddb7ea7a3ea6582aafd2b0e8fa98ab7815b3cfcc41b23a2cac6d438fa4b896127129c6e3ca2ed8234fdbbf5a828a4b9fdf5e81ab03cf4928da6e1907a2d189389aef3434259ac70aef5e9bf8d3521fc8da788b9bb2e639b7d9c42cfaf0370df8d529b242a7c5ac614c22764ca616871b82c25935ec80a71c417ca9f086f1f50dcb", 0xc3}], 0x4}, 0x0, 0x8000}, 0x3) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c884}, 0x48805) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0xfffffff8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x7fffffff, 0xd7600000}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000811) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000840)={0x2, 0x5}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000880)={0x0, 0x4, 0x5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c80)={r3, 0x7, 0x3}) r5 = epoll_create1(0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001080), 0x290202, 0x0) poll(&(0x7f00000010c0)=[{r0, 0x114}, {r5, 0xc0d9}, {r6, 0x2}], 0x3, 0x1ff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001100)={r3, 0x9, 0x4, 0x1}) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000001500)={0x4, 0x20, 0x8001, 0x1ff}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001540)={r4, 0x7, 0x3, 0x1}) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001940), 0xc0, 0x0) r8 = syz_io_uring_complete(0x0) dup2(r7, r8) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001980)={{0x0, 0x81, 0x4, 0xff, 0x6, 0x4, 0x4, 0xf6, 0x7, 0x2, 0x8, 0x3, 0xcca2, 0x10001, 0x8307}}) [ 57.465299] audit: type=1400 audit(1768689484.174:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:38:04 executing program 3: r0 = pidfd_open(0x0, 0x0) fchmod(r0, 0x64) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7fff, 0x561481) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000080)=0xde2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x3}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0xd, 0x2a, [@supported_rates={0x1, 0x7, [{0x74, 0x1}, {0x36}, {0x3, 0x1}, {0x4}, {0xc}, {0x1}, {0xc}]}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl(r1, 0x3, &(0x7f0000000240)="6109e482ed3264effbafaa962f847fb73723daf243f470") r4 = pidfd_getfd(r2, r2, 0x0) r5 = fcntl$getown(r2, 0x9) fcntl$setown(r4, 0x8, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) r10 = syz_open_dev$vcsa(&(0x7f0000000800), 0xc3b, 0x20802) pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) io_submit(0x0, 0x9, &(0x7f0000000c00)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f0000000280)="e97ae5ce5ad3a12701944ee72ff2d8579cadacb1dc69d1d83d0640d5c87ac37c28b9a6f41349932e42a77c13e5acefd63fc7e2dae7354bd70fe2504df47bc126e716f23085265bf2fb3c907acefcf9bff0f4b00b51adb752a1215e11d1a09181f04e2e8b2452237b9a2aa4820b4f18dd7ac9a7ea699615b8b3c852791d840ba773ae662031b6d76d654e78f7a0a86ca0b7d579f8ae94702f655ae842f8c5fb1f1eeb72f4825e40016850de1baec82bbb7082220b7351d6f18b57ef2afad5717975ca444e5c0ab82c2b0d67892a08fa95bae662c3db98b695ba37850375c1db83bf9e", 0xe2, 0x4, 0x0, 0x6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x7dd, r6, &(0x7f00000003c0)="ad2f1bba5c49ec5ddc30563aad8c7001a1d6b23c3f561198afad25980c936ac44f8fb7ccbba7fa07af1da329ce36646da94f8f9d25a464ab68ae979c0bb4fc2f47fcd87b85b5d8e639a0315a00689a9a1582c350a319e69498074fd75cc840cccc643fac1ad0b98fb3341dd7e109965cbfdd50814f8d98d8f9a0443c78183dd858766b7f5050b0b062b7c83f6b72cc1716ca67a105974c5635f69f032c249fc5b3a24bb8d7358638ca78e9bec8fe1fae8b1d943d2eb116af6b9e5be39be78556b0426a32082a0b08406c0d4281f1990b0bc6078dc6ef25b9ed0828f77f69efd365614282aab4722f08fc55d0d851fc2d091f5b8cc69d4d150f5a0d4762", 0xfd, 0x10001, 0x0, 0x1, r7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x401, r1, &(0x7f0000000540)="e19661127ec8e1bbf2e217cf2dc2890a866e6d2a0044b90fbfead96b23728e24bccd849256334c08a36ff216c1de916cebdafa8fc9231b17285b3c3bc117171137d30cbeec34b5fb89393212a40a6a7f81e34b7d0bdcedc4ccf5522a8a0285cd94343987ae386826165f4d89af6859bccd45cb71d74acdbb6ff09928091107f8", 0x80, 0x9, 0x0, 0x1, r4}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0xa986, r0, &(0x7f0000000600)="7462b2a871787014808467989159a5dea1ef2efe6002cabb2bc5", 0x1a, 0x5, 0x0, 0x2, r8}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x101, r9, &(0x7f00000006c0)="0a83008456573c953e66632bc0dd4f91fbd662d65640a4baee4be1bcc04a97217c329a12ac621fa4cb750e272e6d9f45dd98edb6d837d7bf205dc9a3995cde1274535768496bbb6b11cdc18ff3fd81a25bd726267bebfa9aaf05bbfa3063fc7a1aa0aa71f9e0a13546d573db138f948587e3de71a62b051109a4cd24098bafabcc62ab1202682c4d65fd47184f4a9dbb5600de7a83388a4cd792a821e1490f207ba797c75712facfd123e11b0bddd7117ae35b0d5cd712ce78f285e62fcabe3c", 0xc0, 0x7f, 0x0, 0x1, r1}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x8, r1, &(0x7f00000007c0)="d82b92ddbe2703527cf485bc71fd90df8d2e5654f5db5b78", 0x18, 0x7f, 0x0, 0x1, r10}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8, 0xc4d, r11, &(0x7f00000008c0)="2b442b665d9593a6eb3e54bec5a6d39b866f093e5c77f68c36d5824f79e2cd29517316f4ceb96c35f5282c20cd2860454cc6c2de9a7f1ec05461036186804a61efa826d681c2c5004466399b5e9e740cd312a5483bcc00dec03337f83a4068948c3f6a36b1a0d9ceae5c9c3361768058d3d043d92eedab17d3f37249b78997e50b06c7f84c3c376495ffad50309d16273361a2fc6ed8ededb1b7802f327e96733af6e87bd3290294a439d6e6604287ffa7c668755fc2109fec68f969367467a12c4a1a", 0xc3, 0x8c, 0x0, 0x3, r4}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f0000000a00)="8fe2811d7e5bff2d66e884b6ae8c798b4506f128eab1f87f81f654261a8e3cb4", 0x20, 0xffff}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0xa405, r1, &(0x7f0000000a80)="43f51585f6c467853f57c11a1a47e3ead92c662ec4f17a7ecc034b7f4dfcfdaec09bf36cf5968e017086eeb250ba35aca2130608aad34dcffd1a142249a857ccdfdfb7016a576b013003a032efeb3156d86539f0ba6106d335a16207a673cf75c1b16d92567111e62648af083ac3c5eae7bc82db614b3d5b6d85b5da4389300114631c2c5bcd900d453b88d9828d3180de27e611042fc56819a47bccad8f9eae724b0d6bd279b7a3a0bfe0097d13ef3636b36833551060aee7f934ce38d4b104d4fd6d61031af28eefe0d4b7186834b352fe4964c4c44057e6478843dc406f11a53fdc362966206e696541afb78d5f1f", 0xf0, 0x161e, 0x0, 0x1, r12}]) read(r1, &(0x7f0000000c80)=""/49, 0x31) 22:38:04 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)={{0x10b, 0x8, 0x0, 0x38d, 0x2ac, 0x9, 0x17a, 0x10001}, "e3ec2cffa273b445460fb023285a008e541c5a9ea638b6367afee32cc18c62d1613c6b85fe78ee52010fb0fd4073cf8af06765fd49ca9c18b70cee08189884318ab6e92a6680cde992da9d5198d93870775842073ab55bf86afb2e3821f3f47e069aa99fcb88528676", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa89) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000ac0)={0x3000001c}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) copy_file_range(r1, &(0x7f0000000b40)=0x401, r0, 0x0, 0x5, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000b80)) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000bc0), &(0x7f0000000c00)={0x0, 0xfb, 0xef, 0x4, 0x1, "52736a2804440799080e5318cc89cb0e", "68325330f91bdd981d67a3ee9a29a7bd47fdc96808292d03a9263ad93a457fdef1c6242bd0eaf76ace7d7722ecc9a21693fc45896b302e66d1402c8bef94866030ff4db622b71587c029fd16c2ed2b9bbb88cc791afc249517d58284f1a2dd91216023ee810017bc8b61b04437db76ef11ef3ac107f8e1824a1aba6ecf5883ffb841990f8b016c7716eeb6e5264ef64cd67e62ef8c466b7cbdc895698e551bc23f6ebdc01d6534eb9457d24d921e7b191bb1a3e532e55e70ef0d517050182378845c6818249864ff96473ed46010d95e811778181d4b90947be3"}, 0xef, 0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000d00)) r2 = syz_open_dev$vcsn(&(0x7f0000000d80), 0xe19edbd, 0x8000) getresuid(&(0x7f0000000e80)=0x0, &(0x7f0000000ec0), &(0x7f0000000f00)) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x1, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@nodevmap}, {@aname={'aname', 0x3d, '{'}}, {@version_9p2000}, {@nodevmap}], [{@subj_user={'subj_user', 0x3d, '/dev/vcs#\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@uid_gt={'uid>', r4}}]}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001040)={{0x0, 0x574, 0x27c, 0xffffffff, 0x8, 0x5, 0x200, 0x3, 0x2, 0x3e0, 0x40, 0x9, 0x6, 0xae5, 0xe46c}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002080), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8040) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = accept(r2, &(0x7f0000002180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000002200)=0x80) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) poll(&(0x7f0000002240)=[{r1, 0x80}, {r1, 0x8e}, {r6, 0x2}, {r7, 0x210}, {r0, 0x201}, {r0, 0xa0}, {r2, 0x8000}, {r8, 0x40}], 0x8, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002380)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002280)="5ed8d79ed439f5d084406ef3acc26eed46a9f20a7ba5309cf9987e979e4651823298f6831075b82a3f463a6e20644e513ee1b881f0d7b8088891fee94a99d3d322258bf5fd051fb45466d000d8bcab46b027db0cfb132a31a4db7a4bfc571cadc11572cdb0a87a8e8944f478b16a4f35b6290eff4dbf851c2d178ca9b9120f0a33145a2cbad33553935dcae7b20268655bec3234900cafcee8a48cdcdce4086d4a742c56940f243466fa1e84cb2f32fa456eedb88e3c58590a5d32c3021312519e68a056a938143fcd3190f6534b3964b76ae22e9a29f8d86039d0", 0xdb}, 0x68) 22:38:04 executing program 5: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x500, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000508}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048801}, 0x24000040) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x20000804) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x4080) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r2) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x4000800) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, 0x0, 0x909, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20005000}, 0x8000) 22:38:04 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000000)=0x4147, 0x4) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000000c0)={0x0, 0x7, 0x8000, 0x1}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) readahead(r1, 0xab22, 0x200000000000) r2 = signalfd(r1, &(0x7f00000004c0)={[0xffffffff80000001]}, 0x8) fcntl$getown(r2, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r1, 0x0, &(0x7f0000000500)="1f191812bd602693967725c7a283bef9bfbb66a720537b88af", 0x19, 0x24000000}, 0x80) r3 = syz_io_uring_complete(0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000580)={0x2, 0x2, 0x6, 0x1, 0x4, 0x8f}) r4 = syz_io_uring_complete(0x0) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f00000005c0)=0x20) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000000600)={0x0, 0xffffffff00000001}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000002600)={&(0x7f0000001600)=""/4096, 0x1000}) r5 = fsopen(&(0x7f0000002640)='squashfs\x00', 0x0) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000002680)=0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f00000026c0)={r0, 0x932, 0x0, [0x1, 0x9, 0x100000001, 0x8, 0xfffffffffffffffa], [0x80, 0x8f3d, 0x26, 0x6, 0x88e, 0x8, 0x3, 0x9, 0x4, 0x2, 0x2, 0x2, 0x1, 0x0, 0x5f93, 0x4, 0x5, 0x1, 0x20, 0xfffffffffffffe01, 0x1, 0x6, 0x2, 0x6, 0xd2, 0x7, 0x0, 0x1ff, 0xffff, 0x0, 0x3, 0xfffffffffffffff7, 0x40, 0x3, 0x8, 0x6, 0x81, 0x7, 0x7fff, 0x71, 0x4, 0x1, 0x5, 0x200, 0xe10, 0x83, 0x101, 0xfffffffffffff5f2, 0x8000, 0xcc0e, 0xffffffffffffffc0, 0x4, 0x1, 0xfffffffffffffffc, 0x6, 0x7, 0x800, 0x5, 0xfffffffffffffff7, 0xfffffffffffffff8, 0x4, 0x80000000, 0x100000000, 0x4, 0x1, 0x0, 0x9, 0x2bc0, 0x0, 0x2, 0x4, 0x1, 0x6, 0x6, 0x9, 0xfff, 0x2, 0xa0000000000, 0x5, 0x9, 0x400, 0x7fffffff, 0x100000001, 0xfff, 0x6, 0x7ff, 0x3696ab56, 0x8001, 0x8, 0x5, 0x2, 0x9, 0x3, 0x2, 0x0, 0x8, 0x7, 0x59d2, 0x5, 0x3, 0xffffffffffffffc0, 0x9000000000, 0x3, 0x3, 0x80000001, 0x80000000, 0x34ea787c, 0x28b, 0x80000001, 0x100000001, 0x4, 0x80, 0x9, 0x1, 0xfffffffffffff3c5, 0xfffffffffffffffa, 0x81, 0x658, 0x1000, 0x66, 0x9]}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000002b00)={r6, 0x80000001, 0x10001}) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000002f00)=0x1) 22:38:04 executing program 7: ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x1, 0x3, 0xbd1}) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001080)=@IORING_OP_WRITE={0x17, 0x2, 0x6000, @fd, 0x8, &(0x7f0000000080)="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", 0x1000, 0xbc0f4ec2ea3df2ce, 0x1}, 0x100) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f00000010c0)={0x2, 0xffffffff, 0xfffffff7, 0x6, 0x5e4, 0x5}) poll(&(0x7f0000001100)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x86}], 0x2, 0x10000) r0 = signalfd(0xffffffffffffffff, &(0x7f0000001140)={[0x3]}, 0x8) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000001180)={{0x1, 0x1, 0x80000000, 0x9}, 0x5, [0x1, 0x5, 0x2, 0x200, 0x8, 0x7ff, 0x2, 0xfffffe00, 0x8, 0x6, 0x3, 0x8001, 0x7, 0x100, 0x1f, 0xb70a, 0x1, 0x5, 0x93, 0x3, 0x5, 0x5, 0x7, 0x659b, 0x8, 0x400, 0x3f, 0x8, 0x8, 0x8, 0x9, 0x9, 0xf98e, 0x1, 0x2, 0x80, 0x0, 0x6, 0x3ff, 0xfffffff8, 0x6, 0x8, 0x101, 0x5, 0x8001, 0x200, 0xfffffffd, 0xc21f, 0x1, 0xfffff801, 0x3, 0x80000001, 0x4, 0x6, 0x7, 0x0, 0x84, 0x5, 0x4000, 0x7f, 0x80, 0x80000001, 0x2, 0x3, 0x0, 0x7c, 0xffffffc1, 0x401, 0x5, 0x2b, 0x8001, 0x101, 0x401, 0x40, 0x5, 0x7f, 0xffffffff, 0x5, 0x10000, 0x6, 0x3bae, 0xfff, 0x7, 0x3ff, 0x200, 0x1ff, 0x7fffffff, 0x3, 0x9, 0xd3f8, 0x8, 0x7fff, 0x9, 0x9, 0x5, 0xfffffff8, 0x7, 0x100, 0xe1, 0x0, 0xff, 0x80000001, 0x0, 0xd7, 0x4, 0xa64, 0xfffffffe, 0x98, 0x7fff, 0xffff, 0x0, 0x1000, 0x0, 0x2, 0x1, 0x0, 0xfbd00000, 0x8, 0x9, 0x2, 0x10000, 0xfffffff7, 0x0, 0x5, 0x0, 0x0, 0x5, 0x1, 0x6, 0x6, 0x176, 0x9, 0x3b16f92b, 0x83d, 0x4, 0x1, 0xfffffff7, 0x400, 0x40, 0x1, 0x8, 0x0, 0x1, 0x6, 0x8001, 0x0, 0x7, 0x1, 0x3, 0x0, 0xf01, 0x1, 0x4, 0x81, 0xff, 0x3, 0x8, 0x101, 0x1, 0x5, 0x6, 0x100, 0x1, 0x718, 0x2, 0x6, 0x1, 0x401, 0x1, 0x3, 0x1, 0x6, 0x10001, 0x10000000, 0xffffff20, 0x8755, 0x3, 0x3, 0x300, 0x80000001, 0x40, 0x1, 0x7, 0x82, 0xffffff80, 0x1, 0x0, 0x200, 0x1, 0xfffffff8, 0x800, 0x2, 0x865, 0xffff8000, 0x10000, 0x4, 0xfffffffc, 0x4, 0x7f, 0x4, 0x9, 0x1, 0x0, 0x3, 0x4, 0x7386, 0x7, 0xfffffffb, 0x9, 0x8, 0x7, 0x80, 0x6, 0x9, 0x4, 0x3, 0xa187, 0x6, 0x8, 0x80, 0x80000001, 0xaa9e, 0x3, 0x101, 0x5, 0x5, 0x26df, 0x3, 0x6, 0x7, 0x0, 0xffffffc5, 0x200, 0x6, 0x4, 0x4, 0x81, 0x5, 0x0, 0x8001, 0x5, 0x752, 0x0, 0xfff, 0x8, 0x7, 0x3, 0xff, 0x101, 0x1, 0xffff0001, 0x5, 0x200, 0x1, 0x7, 0x4, 0x3, 0x80, 0x5, 0x7, 0x1, 0x3, 0x3f, 0xb, 0xd7, 0x100, 0xbcae, 0x5, 0x401, 0x8, 0x7, 0x8000, 0x39, 0x10001, 0x1, 0x101, 0x1ff, 0x470900bb, 0x400, 0x1, 0x5, 0x401, 0x3e, 0x800, 0x0, 0x10000, 0x401, 0xfffffffe, 0x9, 0x54, 0x20, 0x4, 0x20, 0x101, 0x8, 0x7, 0x7f, 0x3, 0x2, 0x7ff, 0xfffffc01, 0x0, 0x9, 0x4, 0x20, 0x6, 0x744, 0x3, 0x7fffffff, 0x1, 0xffffff81, 0x9eed, 0x10000, 0x9, 0xffff8001, 0x1, 0x7fffffff, 0x3, 0x4, 0x7, 0x2ef, 0x7, 0xbf, 0x83bf, 0x3, 0x7fff, 0x9, 0x5, 0x4fce, 0x6, 0x71, 0x0, 0x40, 0x7, 0x6, 0x0, 0x3, 0x2, 0x2dd, 0x3, 0x400, 0x2, 0x8001, 0x6, 0xef8e, 0x7, 0x1ff, 0x9c, 0x1ff, 0x1, 0x4e, 0xfffffffa, 0x5, 0x1, 0x1, 0x9, 0x3, 0x2, 0xb, 0x40, 0x40, 0x81, 0x4, 0x9, 0x76, 0x0, 0x80000001, 0x0, 0x80000001, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x2, 0xfff, 0xfffffff7, 0x4, 0xb5, 0x7, 0x3, 0x1, 0xe42, 0x7, 0x6, 0x7f, 0x1, 0x7340fe83, 0x8, 0x101, 0x10001, 0x0, 0x7, 0x6, 0x80000000, 0x4, 0x0, 0x0, 0x401, 0x4, 0xbb29, 0x2, 0x7, 0x3ccb, 0x7, 0x26c, 0x8000, 0x5, 0x3f, 0x0, 0x3f, 0x40, 0x3, 0x7, 0xffffffff, 0x7, 0xffffff01, 0x6, 0xfc, 0x1e0, 0x88, 0x10001, 0x1f, 0x7, 0x57, 0xffffff01, 0x1, 0xfffffffe, 0xa8, 0xff, 0x3f, 0x9, 0x7, 0x3, 0x1000, 0xffff, 0x5, 0x7, 0x1f, 0x7, 0x2, 0x6, 0x9, 0x80000000, 0x2, 0x1, 0x0, 0x2, 0x10001, 0x9, 0x9, 0x2, 0xffff, 0x3, 0x5d05, 0x5, 0x8, 0x8, 0x0, 0x8000, 0x4, 0x4, 0xfffffffa, 0x5, 0xf38, 0x40b6, 0x4, 0xd80000, 0x7, 0xf9, 0x9, 0x0, 0x2, 0xc783, 0x6, 0x5, 0xc51, 0x8001, 0x20, 0x453, 0x2, 0x10001, 0x48c6a1b, 0x8, 0x81, 0x3, 0x200, 0x2a95, 0xfff, 0x3ff, 0x3, 0x3, 0x4, 0x1, 0x375f, 0x9, 0x310103c2, 0x2, 0x1f, 0xff, 0x0, 0x3f, 0x0, 0x7, 0x5, 0x7, 0x6, 0x4, 0x3, 0x5, 0x81, 0x400, 0x4, 0x7fffffff, 0x9, 0x1000, 0x70e, 0x5, 0x7f2, 0x7fffffff, 0x6, 0x6, 0xfffffffc, 0x0, 0x3, 0x5, 0x10001, 0x3ff, 0x5, 0x80000000, 0x0, 0x8001, 0x2, 0x8, 0xff, 0x8, 0x69a, 0x8b5c, 0x1000, 0x3, 0x9, 0x9, 0x8d, 0x4, 0x0, 0x2, 0xffffffff, 0x800, 0xffff, 0xfffffeff, 0x401, 0xffffffff, 0x81, 0x2, 0x1, 0x4c, 0x4, 0xe6, 0x8, 0x2, 0xdc, 0xd6d, 0x3240, 0x1, 0x54, 0x3, 0x1, 0x7ff, 0x0, 0xb58, 0xffff, 0x88, 0x4, 0x2, 0x5, 0xee, 0x4, 0x8000, 0x1, 0x2, 0x3f, 0x3, 0x3f, 0x7, 0x7ff, 0x6, 0x7ff, 0x6, 0x4, 0x20, 0x7, 0x0, 0x6c, 0x4bb, 0x3f, 0x5, 0x1, 0x7ff, 0x8, 0x9, 0xffffffff, 0x1, 0x80000001, 0xffff, 0x10001, 0x80, 0x20, 0x96f, 0x7fff, 0x8, 0x353, 0xffffffff, 0x4, 0x8, 0x8, 0x8ce, 0x4, 0x8, 0x8, 0x1, 0x10000, 0x6, 0x7fff, 0x9, 0x400, 0x6, 0x1, 0xffffff80, 0x3e18b010, 0x56, 0x9, 0x200, 0xfffffe01, 0xfd0e, 0xffffffff, 0x628c, 0x8001, 0x6, 0x10000, 0x2, 0x5, 0x8, 0xb7a, 0x7fff, 0x4, 0xee9, 0x6, 0xfffffffe, 0x81, 0x3f, 0x5, 0x1ff, 0x1ff, 0x101, 0x3f, 0x3, 0x1ff, 0xffffffff, 0x2, 0x9, 0x80, 0x2, 0xffffffff, 0xe05, 0x8, 0x8, 0x7, 0x1, 0x9, 0x8, 0xb64, 0x8, 0x2, 0xd6f, 0x4, 0x40, 0x0, 0x7, 0xfffffbff, 0x4, 0x1c200000, 0xfd, 0x2, 0x0, 0x40, 0x4, 0x1b, 0x0, 0xfffffffd, 0x4, 0x670c, 0xdd69, 0x8, 0x0, 0x5, 0x5, 0x8, 0x6, 0x16b7, 0x8, 0x0, 0x2, 0x9, 0x7f, 0x47, 0xffff, 0x7f, 0x3, 0xfffffffa, 0x800, 0x8, 0x3f, 0x9d, 0x8, 0x3, 0x200, 0x20, 0x3, 0x7f, 0x8, 0x2, 0x5, 0x1ff, 0x4, 0x5, 0x1, 0x40, 0x0, 0x174, 0xb3e4, 0x5, 0x6, 0x101, 0x4, 0x9, 0x1ff, 0xae, 0x3, 0x9, 0x71c, 0x7f, 0x80000001, 0x6, 0x3, 0x80000000, 0x8, 0x7ff, 0x4, 0x10001, 0x1, 0x800, 0x5, 0x9e, 0x8, 0xffff, 0x800, 0xffffffff, 0x8, 0x1, 0x401, 0x4, 0x6, 0x401, 0x1000, 0x5, 0x2, 0x11a4bf00, 0xff, 0x7fff, 0x7, 0x2, 0x5, 0xee8a, 0x8000, 0x6, 0x8, 0x80000000, 0x2, 0x4, 0xfff, 0x200, 0x400, 0x0, 0x6, 0x2, 0x8, 0x835, 0x9, 0x6, 0x7ff, 0xea0b, 0x9, 0x9, 0xffffffff, 0x4, 0x1, 0x4, 0x1, 0x27110b77, 0x200, 0x7, 0x2, 0x81, 0x2, 0x544ca26d, 0x7, 0x3, 0x8, 0xbc, 0xb, 0x5, 0xffffffff, 0x1, 0x7, 0x5, 0x0, 0x38b, 0xe37f, 0x401, 0xfffffebd, 0x9, 0x315, 0x0, 0x7, 0x0, 0x7f, 0xa9, 0x5, 0x1, 0x2, 0x5, 0x8, 0xffffffff, 0x0, 0x2a5, 0x7fff, 0x0, 0x0, 0x4, 0x5, 0x0, 0x4cba, 0x6, 0x3, 0x5, 0x4, 0x6, 0x3ff, 0x127e, 0x20, 0x8001, 0x7d418e48, 0x800, 0xffff, 0x7, 0xe5eec99d, 0x2, 0x5f, 0xd8a, 0x0, 0x6, 0x7, 0x5, 0x7, 0x4, 0x23d0, 0x7ff, 0xffff, 0x3f, 0x2, 0x9, 0x4, 0x2d1, 0x200, 0x7fffffff, 0x9, 0x401, 0xffffff80, 0x6, 0x1f, 0x9, 0x10000, 0xfffffffe, 0x1ff, 0x2, 0xffff2fb7, 0xb4cb, 0x7fffffff, 0x8, 0x401, 0x8001, 0x1, 0x8, 0x9, 0x7, 0xf4, 0x2, 0x5, 0x7, 0x80000000, 0x4, 0x3, 0x8, 0x3f, 0x8, 0x5, 0x20, 0x7, 0x2, 0x9, 0x400, 0x5a8b, 0xc1645845, 0x9, 0x3dd, 0x7fff, 0x6, 0xff, 0x80, 0x2, 0x80000000, 0x3, 0x1, 0x6, 0x80008000, 0xfff, 0x6, 0x1ff, 0x9, 0x7, 0xb0, 0xff, 0x101, 0x6, 0x9f88, 0xffffffd6, 0x3, 0x0, 0x7, 0x7, 0x8, 0x8, 0x7, 0xd7d, 0x1, 0x1, 0xfdbe, 0x8, 0x81, 0x6, 0x5, 0x0, 0x8, 0x39f, 0x5, 0x2, 0x200, 0x0, 0xffffffff, 0x5, 0x80, 0x9, 0x1, 0x4, 0x7, 0x5, 0xc1, 0x765, 0x6, 0x400, 0x7, 0x40, 0x0, 0x3ff, 0x7, 0xc78c, 0x2, 0x1, 0x400, 0x9, 0x0, 0x1, 0xffff0001, 0x9, 0xffffffff, 0x3, 0x3, 0x6, 0x100, 0x1000, 0x6, 0x5, 0x5d9, 0x8, 0x6, 0x9, 0x3f, 0x6, 0x62772d32, 0x8000, 0x100, 0x1, 0x4, 0x0, 0x114b1675, 0x1, 0xb1, 0xfffffffd, 0x0, 0x6, 0xfd, 0x7, 0x1f, 0x0, 0x94, 0x3, 0x1ff, 0x4, 0x0, 0x91, 0x4, 0xa8, 0x2, 0x6, 0x40]}) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f00000021c0)={0x7a, "82d77d0cdeeaf3031c4c2003b1abc03573aa85336784aecf1367db4e58cff3a61b4485946173c49d0a52b858a865f439d13e89578dad950841e99dad946a07a74326ac36ac6b623a633ffc075ea0c985c261dce4483b3cf5b5fa20fe771dad114e79f9836e2305845d7bee35ccee676f9a134b32a0209e8afabf"}) r1 = syz_io_uring_complete(0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000002240)={0x3, 0x1, 0xf46}) pipe(&(0x7f0000002280)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000022c0)={0x11}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002300)={{0x0, 0x9, 0x0, 0x9, 0x0, 0xfbe2, 0x1, 0x0, 0x80000001, 0x1000, 0x2, 0x7, 0x6, 0x7fff, 0x3}}) r4 = fork() fcntl$lock(r3, 0x7, &(0x7f0000003300)={0x0, 0x4, 0x7fff, 0xfff, r4}) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000003340)=0x3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000003380)={0x8}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r2, 0xf505, 0x0) write$binfmt_aout(r5, &(0x7f00000033c0)={{0x10b, 0x5, 0x7, 0x2d, 0x9, 0x6, 0x11e, 0x18000000}, "b9f3d5fb3b4dae13b9895de92ae084379232bce8e0516a261ca7f18127d04360b4f72570cfc8a945694723e28b6a026f00f4e46861cb60153f67d4ab11ae5a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x95f) [ 58.663613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.666900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.671048] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.679496] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.683250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.737898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.740840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.752776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.754425] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.762855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.764963] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.770312] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.778257] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.786348] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.791453] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.856187] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.859449] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.861189] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.878987] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.881458] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.926198] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.930843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 58.938078] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 58.948458] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 58.973445] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.975863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 58.979385] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.981722] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 58.983426] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 58.996463] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 58.997514] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 59.000425] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 59.002193] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.010636] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 59.012566] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 59.023699] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 59.044236] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 59.050496] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 59.063026] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 59.071564] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 60.760203] Bluetooth: hci0: command tx timeout [ 60.823299] Bluetooth: hci1: command tx timeout [ 60.887210] Bluetooth: hci2: command tx timeout [ 60.951449] Bluetooth: hci3: command tx timeout [ 61.079202] Bluetooth: hci6: command tx timeout [ 61.079376] Bluetooth: hci4: command tx timeout [ 61.080316] Bluetooth: hci5: command tx timeout [ 61.207234] Bluetooth: hci7: command tx timeout [ 62.807693] Bluetooth: hci0: command tx timeout [ 62.872221] Bluetooth: hci1: command tx timeout [ 62.936206] Bluetooth: hci2: command tx timeout [ 62.999174] Bluetooth: hci3: command tx timeout [ 63.127924] Bluetooth: hci4: command tx timeout [ 63.128013] Bluetooth: hci6: command tx timeout [ 63.129145] Bluetooth: hci5: command tx timeout [ 63.255279] Bluetooth: hci7: command tx timeout [ 64.855555] Bluetooth: hci0: command tx timeout [ 64.919172] Bluetooth: hci1: command tx timeout [ 64.983818] Bluetooth: hci2: command tx timeout [ 65.047507] Bluetooth: hci3: command tx timeout [ 65.176139] Bluetooth: hci4: command tx timeout [ 65.176549] Bluetooth: hci6: command tx timeout [ 65.176929] Bluetooth: hci5: command tx timeout [ 65.306162] Bluetooth: hci7: command tx timeout [ 66.904242] Bluetooth: hci0: command tx timeout [ 66.968238] Bluetooth: hci1: command tx timeout [ 67.032357] Bluetooth: hci2: command tx timeout [ 67.096216] Bluetooth: hci3: command tx timeout [ 67.225146] Bluetooth: hci5: command tx timeout [ 67.225538] Bluetooth: hci6: command tx timeout [ 67.225644] Bluetooth: hci4: command tx timeout [ 67.351193] Bluetooth: hci7: command tx timeout [ 95.758842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.760085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.043680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.045051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.174184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.174787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.392429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.393044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.505462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.506546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.677095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.678080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.855021] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.984472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.985077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:38:43 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="ed0f0e19b6e6f636f1a8f4ee708f20fb3cd2016a50d22d14302a16271867e1d8ec23726a72d075a414bcb48af9fba774812856a9d5f82794574b1d571633609bfd163963161a716fe98f269501fd2efe4ac92ed868201fa5855e6b80ae062bcf88185a6ccf1b52d3f42b347d90ac5a4155bd9127f219567619", 0x79}, {&(0x7f0000000100)="b445aa9a8aca6aef5c781fed98e23ac94b54a7e349df34fa737841eb583a08f8d294b17d7fb37bcf754160ae76a17568f2fa49c0ee0c26f571040d621b4924f2267619fed34189a3a897ce40e3024fda971bf74e373042392fe89054db671f1a7ae362c943ad342aa9a9014cd780fc5124b213b840f718880845e081ec59ec14136229c0ba2345e6baacec4be2b100e761", 0x91}, {&(0x7f00000001c0)="9c7227327a062a8b7b55037716465a5d155f99d7dbba0617ee6be427b5702eda41193e09987ec75fe2f76a0658f48a6b939de64220c5b29caa9452cbd8e1fa48ca8771e57a0931df67dfa7a51ef78493b5d5704e7d1ddb9eba", 0x59}, {&(0x7f0000000240)="3a8f18a3cfcb7722bd932780406f9cce21d346bb9d61b902fb088126fca4ff6d3acc5ff30a940c1bd4ae85321d4236bc970adb4cc7ed643ec131a20cd4bc44ce28bcddb7ea7a3ea6582aafd2b0e8fa98ab7815b3cfcc41b23a2cac6d438fa4b896127129c6e3ca2ed8234fdbbf5a828a4b9fdf5e81ab03cf4928da6e1907a2d189389aef3434259ac70aef5e9bf8d3521fc8da788b9bb2e639b7d9c42cfaf0370df8d529b242a7c5ac614c22764ca616871b82c25935ec80a71c417ca9f086f1f50dcb", 0xc3}], 0x4}, 0x0, 0x8000}, 0x3) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c884}, 0x48805) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0xfffffff8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x7fffffff, 0xd7600000}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000811) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000840)={0x2, 0x5}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000880)={0x0, 0x4, 0x5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c80)={r3, 0x7, 0x3}) r5 = epoll_create1(0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001080), 0x290202, 0x0) poll(&(0x7f00000010c0)=[{r0, 0x114}, {r5, 0xc0d9}, {r6, 0x2}], 0x3, 0x1ff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001100)={r3, 0x9, 0x4, 0x1}) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000001500)={0x4, 0x20, 0x8001, 0x1ff}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001540)={r4, 0x7, 0x3, 0x1}) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001940), 0xc0, 0x0) r8 = syz_io_uring_complete(0x0) dup2(r7, r8) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001980)={{0x0, 0x81, 0x4, 0xff, 0x6, 0x4, 0x4, 0xf6, 0x7, 0x2, 0x8, 0x3, 0xcca2, 0x10001, 0x8307}}) 22:38:43 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)={{0x10b, 0x8, 0x0, 0x38d, 0x2ac, 0x9, 0x17a, 0x10001}, "e3ec2cffa273b445460fb023285a008e541c5a9ea638b6367afee32cc18c62d1613c6b85fe78ee52010fb0fd4073cf8af06765fd49ca9c18b70cee08189884318ab6e92a6680cde992da9d5198d93870775842073ab55bf86afb2e3821f3f47e069aa99fcb88528676", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa89) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000ac0)={0x3000001c}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) copy_file_range(r1, &(0x7f0000000b40)=0x401, r0, 0x0, 0x5, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000b80)) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000bc0), &(0x7f0000000c00)={0x0, 0xfb, 0xef, 0x4, 0x1, "52736a2804440799080e5318cc89cb0e", "68325330f91bdd981d67a3ee9a29a7bd47fdc96808292d03a9263ad93a457fdef1c6242bd0eaf76ace7d7722ecc9a21693fc45896b302e66d1402c8bef94866030ff4db622b71587c029fd16c2ed2b9bbb88cc791afc249517d58284f1a2dd91216023ee810017bc8b61b04437db76ef11ef3ac107f8e1824a1aba6ecf5883ffb841990f8b016c7716eeb6e5264ef64cd67e62ef8c466b7cbdc895698e551bc23f6ebdc01d6534eb9457d24d921e7b191bb1a3e532e55e70ef0d517050182378845c6818249864ff96473ed46010d95e811778181d4b90947be3"}, 0xef, 0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000d00)) r2 = syz_open_dev$vcsn(&(0x7f0000000d80), 0xe19edbd, 0x8000) getresuid(&(0x7f0000000e80)=0x0, &(0x7f0000000ec0), &(0x7f0000000f00)) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x1, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@nodevmap}, {@aname={'aname', 0x3d, '{'}}, {@version_9p2000}, {@nodevmap}], [{@subj_user={'subj_user', 0x3d, '/dev/vcs#\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@uid_gt={'uid>', r4}}]}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001040)={{0x0, 0x574, 0x27c, 0xffffffff, 0x8, 0x5, 0x200, 0x3, 0x2, 0x3e0, 0x40, 0x9, 0x6, 0xae5, 0xe46c}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002080), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8040) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = accept(r2, &(0x7f0000002180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000002200)=0x80) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) poll(&(0x7f0000002240)=[{r1, 0x80}, {r1, 0x8e}, {r6, 0x2}, {r7, 0x210}, {r0, 0x201}, {r0, 0xa0}, {r2, 0x8000}, {r8, 0x40}], 0x8, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002380)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002280)="5ed8d79ed439f5d084406ef3acc26eed46a9f20a7ba5309cf9987e979e4651823298f6831075b82a3f463a6e20644e513ee1b881f0d7b8088891fee94a99d3d322258bf5fd051fb45466d000d8bcab46b027db0cfb132a31a4db7a4bfc571cadc11572cdb0a87a8e8944f478b16a4f35b6290eff4dbf851c2d178ca9b9120f0a33145a2cbad33553935dcae7b20268655bec3234900cafcee8a48cdcdce4086d4a742c56940f243466fa1e84cb2f32fa456eedb88e3c58590a5d32c3021312519e68a056a938143fcd3190f6534b3964b76ae22e9a29f8d86039d0", 0xdb}, 0x68) [ 97.058856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.060203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:38:43 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)={{0x10b, 0x8, 0x0, 0x38d, 0x2ac, 0x9, 0x17a, 0x10001}, "e3ec2cffa273b445460fb023285a008e541c5a9ea638b6367afee32cc18c62d1613c6b85fe78ee52010fb0fd4073cf8af06765fd49ca9c18b70cee08189884318ab6e92a6680cde992da9d5198d93870775842073ab55bf86afb2e3821f3f47e069aa99fcb88528676", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa89) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000ac0)={0x3000001c}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) copy_file_range(r1, &(0x7f0000000b40)=0x401, r0, 0x0, 0x5, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000b80)) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000bc0), &(0x7f0000000c00)={0x0, 0xfb, 0xef, 0x4, 0x1, "52736a2804440799080e5318cc89cb0e", "68325330f91bdd981d67a3ee9a29a7bd47fdc96808292d03a9263ad93a457fdef1c6242bd0eaf76ace7d7722ecc9a21693fc45896b302e66d1402c8bef94866030ff4db622b71587c029fd16c2ed2b9bbb88cc791afc249517d58284f1a2dd91216023ee810017bc8b61b04437db76ef11ef3ac107f8e1824a1aba6ecf5883ffb841990f8b016c7716eeb6e5264ef64cd67e62ef8c466b7cbdc895698e551bc23f6ebdc01d6534eb9457d24d921e7b191bb1a3e532e55e70ef0d517050182378845c6818249864ff96473ed46010d95e811778181d4b90947be3"}, 0xef, 0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000d00)) r2 = syz_open_dev$vcsn(&(0x7f0000000d80), 0xe19edbd, 0x8000) getresuid(&(0x7f0000000e80)=0x0, &(0x7f0000000ec0), &(0x7f0000000f00)) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x1, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@nodevmap}, {@aname={'aname', 0x3d, '{'}}, {@version_9p2000}, {@nodevmap}], [{@subj_user={'subj_user', 0x3d, '/dev/vcs#\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@uid_gt={'uid>', r4}}]}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001040)={{0x0, 0x574, 0x27c, 0xffffffff, 0x8, 0x5, 0x200, 0x3, 0x2, 0x3e0, 0x40, 0x9, 0x6, 0xae5, 0xe46c}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002080), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8040) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = accept(r2, &(0x7f0000002180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000002200)=0x80) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) poll(&(0x7f0000002240)=[{r1, 0x80}, {r1, 0x8e}, {r6, 0x2}, {r7, 0x210}, {r0, 0x201}, {r0, 0xa0}, {r2, 0x8000}, {r8, 0x40}], 0x8, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002380)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002280)="5ed8d79ed439f5d084406ef3acc26eed46a9f20a7ba5309cf9987e979e4651823298f6831075b82a3f463a6e20644e513ee1b881f0d7b8088891fee94a99d3d322258bf5fd051fb45466d000d8bcab46b027db0cfb132a31a4db7a4bfc571cadc11572cdb0a87a8e8944f478b16a4f35b6290eff4dbf851c2d178ca9b9120f0a33145a2cbad33553935dcae7b20268655bec3234900cafcee8a48cdcdce4086d4a742c56940f243466fa1e84cb2f32fa456eedb88e3c58590a5d32c3021312519e68a056a938143fcd3190f6534b3964b76ae22e9a29f8d86039d0", 0xdb}, 0x68) 22:38:44 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)={{0x10b, 0x8, 0x0, 0x38d, 0x2ac, 0x9, 0x17a, 0x10001}, "e3ec2cffa273b445460fb023285a008e541c5a9ea638b6367afee32cc18c62d1613c6b85fe78ee52010fb0fd4073cf8af06765fd49ca9c18b70cee08189884318ab6e92a6680cde992da9d5198d93870775842073ab55bf86afb2e3821f3f47e069aa99fcb88528676", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa89) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000ac0)={0x3000001c}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) copy_file_range(r1, &(0x7f0000000b40)=0x401, r0, 0x0, 0x5, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000b80)) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000bc0), &(0x7f0000000c00)={0x0, 0xfb, 0xef, 0x4, 0x1, "52736a2804440799080e5318cc89cb0e", "68325330f91bdd981d67a3ee9a29a7bd47fdc96808292d03a9263ad93a457fdef1c6242bd0eaf76ace7d7722ecc9a21693fc45896b302e66d1402c8bef94866030ff4db622b71587c029fd16c2ed2b9bbb88cc791afc249517d58284f1a2dd91216023ee810017bc8b61b04437db76ef11ef3ac107f8e1824a1aba6ecf5883ffb841990f8b016c7716eeb6e5264ef64cd67e62ef8c466b7cbdc895698e551bc23f6ebdc01d6534eb9457d24d921e7b191bb1a3e532e55e70ef0d517050182378845c6818249864ff96473ed46010d95e811778181d4b90947be3"}, 0xef, 0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000d00)) r2 = syz_open_dev$vcsn(&(0x7f0000000d80), 0xe19edbd, 0x8000) getresuid(&(0x7f0000000e80)=0x0, &(0x7f0000000ec0), &(0x7f0000000f00)) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x1, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@nodevmap}, {@aname={'aname', 0x3d, '{'}}, {@version_9p2000}, {@nodevmap}], [{@subj_user={'subj_user', 0x3d, '/dev/vcs#\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@uid_gt={'uid>', r4}}]}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001040)={{0x0, 0x574, 0x27c, 0xffffffff, 0x8, 0x5, 0x200, 0x3, 0x2, 0x3e0, 0x40, 0x9, 0x6, 0xae5, 0xe46c}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002080), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8040) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = accept(r2, &(0x7f0000002180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000002200)=0x80) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) poll(&(0x7f0000002240)=[{r1, 0x80}, {r1, 0x8e}, {r6, 0x2}, {r7, 0x210}, {r0, 0x201}, {r0, 0xa0}, {r2, 0x8000}, {r8, 0x40}], 0x8, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002380)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002280)="5ed8d79ed439f5d084406ef3acc26eed46a9f20a7ba5309cf9987e979e4651823298f6831075b82a3f463a6e20644e513ee1b881f0d7b8088891fee94a99d3d322258bf5fd051fb45466d000d8bcab46b027db0cfb132a31a4db7a4bfc571cadc11572cdb0a87a8e8944f478b16a4f35b6290eff4dbf851c2d178ca9b9120f0a33145a2cbad33553935dcae7b20268655bec3234900cafcee8a48cdcdce4086d4a742c56940f243466fa1e84cb2f32fa456eedb88e3c58590a5d32c3021312519e68a056a938143fcd3190f6534b3964b76ae22e9a29f8d86039d0", 0xdb}, 0x68) 22:38:44 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)={{0x10b, 0x8, 0x0, 0x38d, 0x2ac, 0x9, 0x17a, 0x10001}, "e3ec2cffa273b445460fb023285a008e541c5a9ea638b6367afee32cc18c62d1613c6b85fe78ee52010fb0fd4073cf8af06765fd49ca9c18b70cee08189884318ab6e92a6680cde992da9d5198d93870775842073ab55bf86afb2e3821f3f47e069aa99fcb88528676", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa89) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000ac0)={0x3000001c}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) copy_file_range(r1, &(0x7f0000000b40)=0x401, r0, 0x0, 0x5, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000b80)) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000bc0), &(0x7f0000000c00)={0x0, 0xfb, 0xef, 0x4, 0x1, "52736a2804440799080e5318cc89cb0e", "68325330f91bdd981d67a3ee9a29a7bd47fdc96808292d03a9263ad93a457fdef1c6242bd0eaf76ace7d7722ecc9a21693fc45896b302e66d1402c8bef94866030ff4db622b71587c029fd16c2ed2b9bbb88cc791afc249517d58284f1a2dd91216023ee810017bc8b61b04437db76ef11ef3ac107f8e1824a1aba6ecf5883ffb841990f8b016c7716eeb6e5264ef64cd67e62ef8c466b7cbdc895698e551bc23f6ebdc01d6534eb9457d24d921e7b191bb1a3e532e55e70ef0d517050182378845c6818249864ff96473ed46010d95e811778181d4b90947be3"}, 0xef, 0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000d00)) r2 = syz_open_dev$vcsn(&(0x7f0000000d80), 0xe19edbd, 0x8000) getresuid(&(0x7f0000000e80)=0x0, &(0x7f0000000ec0), &(0x7f0000000f00)) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x1, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@nodevmap}, {@aname={'aname', 0x3d, '{'}}, {@version_9p2000}, {@nodevmap}], [{@subj_user={'subj_user', 0x3d, '/dev/vcs#\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@uid_gt={'uid>', r4}}]}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001040)={{0x0, 0x574, 0x27c, 0xffffffff, 0x8, 0x5, 0x200, 0x3, 0x2, 0x3e0, 0x40, 0x9, 0x6, 0xae5, 0xe46c}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002080), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8040) socket$inet6_udplite(0xa, 0x2, 0x88) accept(r2, &(0x7f0000002180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000002200)=0x80) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002380)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002280)="5ed8d79ed439f5d084406ef3acc26eed46a9f20a7ba5309cf9987e979e4651823298f6831075b82a3f463a6e20644e513ee1b881f0d7b8088891fee94a99d3d322258bf5fd051fb45466d000d8bcab46b027db0cfb132a31a4db7a4bfc571cadc11572cdb0a87a8e8944f478b16a4f35b6290eff4dbf851c2d178ca9b9120f0a33145a2cbad33553935dcae7b20268655bec3234900cafcee8a48cdcdce4086d4a742c56940f243466fa1e84cb2f32fa456eedb88e3c58590a5d32c3021312519e68a056a938143fcd3190f6534b3964b76ae22e9a29f8d86039d0", 0xdb}, 0x68) 22:38:44 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="ed0f0e19b6e6f636f1a8f4ee708f20fb3cd2016a50d22d14302a16271867e1d8ec23726a72d075a414bcb48af9fba774812856a9d5f82794574b1d571633609bfd163963161a716fe98f269501fd2efe4ac92ed868201fa5855e6b80ae062bcf88185a6ccf1b52d3f42b347d90ac5a4155bd9127f219567619", 0x79}, {&(0x7f0000000100)="b445aa9a8aca6aef5c781fed98e23ac94b54a7e349df34fa737841eb583a08f8d294b17d7fb37bcf754160ae76a17568f2fa49c0ee0c26f571040d621b4924f2267619fed34189a3a897ce40e3024fda971bf74e373042392fe89054db671f1a7ae362c943ad342aa9a9014cd780fc5124b213b840f718880845e081ec59ec14136229c0ba2345e6baacec4be2b100e761", 0x91}, {&(0x7f00000001c0)="9c7227327a062a8b7b55037716465a5d155f99d7dbba0617ee6be427b5702eda41193e09987ec75fe2f76a0658f48a6b939de64220c5b29caa9452cbd8e1fa48ca8771e57a0931df67dfa7a51ef78493b5d5704e7d1ddb9eba", 0x59}, {&(0x7f0000000240)="3a8f18a3cfcb7722bd932780406f9cce21d346bb9d61b902fb088126fca4ff6d3acc5ff30a940c1bd4ae85321d4236bc970adb4cc7ed643ec131a20cd4bc44ce28bcddb7ea7a3ea6582aafd2b0e8fa98ab7815b3cfcc41b23a2cac6d438fa4b896127129c6e3ca2ed8234fdbbf5a828a4b9fdf5e81ab03cf4928da6e1907a2d189389aef3434259ac70aef5e9bf8d3521fc8da788b9bb2e639b7d9c42cfaf0370df8d529b242a7c5ac614c22764ca616871b82c25935ec80a71c417ca9f086f1f50dcb", 0xc3}], 0x4}, 0x0, 0x8000}, 0x3) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c884}, 0x48805) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0xfffffff8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x7fffffff, 0xd7600000}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000811) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000840)={0x2, 0x5}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000880)={0x0, 0x4, 0x5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000c80)={r3, 0x7, 0x3}) r5 = epoll_create1(0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001080), 0x290202, 0x0) poll(&(0x7f00000010c0)=[{r0, 0x114}, {r5, 0xc0d9}, {r6, 0x2}], 0x3, 0x1ff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000001100)={r3, 0x9, 0x4, 0x1}) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000001500)={0x4, 0x20, 0x8001, 0x1ff}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001540)={r4, 0x7, 0x3, 0x1}) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001940), 0xc0, 0x0) r8 = syz_io_uring_complete(0x0) dup2(r7, r8) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001980)={{0x0, 0x81, 0x4, 0xff, 0x6, 0x4, 0x4, 0xf6, 0x7, 0x2, 0x8, 0x3, 0xcca2, 0x10001, 0x8307}}) 22:38:44 executing program 4: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)={{0x10b, 0x8, 0x0, 0x38d, 0x2ac, 0x9, 0x17a, 0x10001}, "e3ec2cffa273b445460fb023285a008e541c5a9ea638b6367afee32cc18c62d1613c6b85fe78ee52010fb0fd4073cf8af06765fd49ca9c18b70cee08189884318ab6e92a6680cde992da9d5198d93870775842073ab55bf86afb2e3821f3f47e069aa99fcb88528676", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa89) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000ac0)={0x3000001c}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) copy_file_range(r1, &(0x7f0000000b40)=0x401, r0, 0x0, 0x5, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000b80)) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000bc0), &(0x7f0000000c00)={0x0, 0xfb, 0xef, 0x4, 0x1, "52736a2804440799080e5318cc89cb0e", "68325330f91bdd981d67a3ee9a29a7bd47fdc96808292d03a9263ad93a457fdef1c6242bd0eaf76ace7d7722ecc9a21693fc45896b302e66d1402c8bef94866030ff4db622b71587c029fd16c2ed2b9bbb88cc791afc249517d58284f1a2dd91216023ee810017bc8b61b04437db76ef11ef3ac107f8e1824a1aba6ecf5883ffb841990f8b016c7716eeb6e5264ef64cd67e62ef8c466b7cbdc895698e551bc23f6ebdc01d6534eb9457d24d921e7b191bb1a3e532e55e70ef0d517050182378845c6818249864ff96473ed46010d95e811778181d4b90947be3"}, 0xef, 0x1) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000d00)) r2 = syz_open_dev$vcsn(&(0x7f0000000d80), 0xe19edbd, 0x8000) getresuid(&(0x7f0000000e80)=0x0, &(0x7f0000000ec0), &(0x7f0000000f00)) r4 = geteuid() mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x1, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@nodevmap}, {@aname={'aname', 0x3d, '{'}}, {@version_9p2000}, {@nodevmap}], [{@subj_user={'subj_user', 0x3d, '/dev/vcs#\x00'}}, {@euid_eq={'euid', 0x3d, r3}}, {@uid_gt={'uid>', r4}}]}}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001040)={{0x0, 0x574, 0x27c, 0xffffffff, 0x8, 0x5, 0x200, 0x3, 0x2, 0x3e0, 0x40, 0x9, 0x6, 0xae5, 0xe46c}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002080), r1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8040) socket$inet6_udplite(0xa, 0x2, 0x88) accept(r2, &(0x7f0000002180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000002200)=0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002380)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002280)="5ed8d79ed439f5d084406ef3acc26eed46a9f20a7ba5309cf9987e979e4651823298f6831075b82a3f463a6e20644e513ee1b881f0d7b8088891fee94a99d3d322258bf5fd051fb45466d000d8bcab46b027db0cfb132a31a4db7a4bfc571cadc11572cdb0a87a8e8944f478b16a4f35b6290eff4dbf851c2d178ca9b9120f0a33145a2cbad33553935dcae7b20268655bec3234900cafcee8a48cdcdce4086d4a742c56940f243466fa1e84cb2f32fa456eedb88e3c58590a5d32c3021312519e68a056a938143fcd3190f6534b3964b76ae22e9a29f8d86039d0", 0xdb}, 0x68) 22:38:44 executing program 5: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x500, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000508}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048801}, 0x24000040) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x20000804) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x4080) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r2) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x4000800) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r8, 0x84009422, &(0x7f0000000a80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, 0x0, 0x909, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20005000}, 0x8000) [ 97.997381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.998009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.052662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.053354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.157129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.157722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.187048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.187849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.258418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.259009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.298015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.298828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.346912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.347505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.387559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.388151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.467089] [ 98.467271] ===================================== [ 98.467647] WARNING: bad unlock balance detected! [ 98.468025] 6.19.0-rc5-next-20260116 #1 Not tainted [ 98.468414] ------------------------------------- [ 98.468784] syz-executor.0/3945 is trying to release lock (rcu_read_lock) at: [ 98.469346] [] __wait_on_freeing_inode+0x105/0x350 [ 98.470190] but there are no more locks to release! [ 98.471130] [ 98.471130] other info that might help us debug this: [ 98.472589] 4 locks held by syz-executor.0/3945: [ 98.473556] #0: ffff88800f76a3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 98.475683] #1: ffff88801b7e96f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 98.477636] #2: ffff88800f76e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 98.479053] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 98.479774] [ 98.479774] stack backtrace: [ 98.480132] CPU: 0 UID: 0 PID: 3945 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 98.480147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 98.480154] Call Trace: [ 98.480158] [ 98.480163] dump_stack_lvl+0xca/0x120 [ 98.480193] ? __wait_on_freeing_inode+0x105/0x350 [ 98.480207] print_unlock_imbalance_bug+0x118/0x130 [ 98.480222] ? __wait_on_freeing_inode+0x105/0x350 [ 98.480236] lock_release+0x1ee/0x270 [ 98.480251] __wait_on_freeing_inode+0x10a/0x350 [ 98.480266] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 98.480281] ? __pfx_var_wake_function+0x10/0x10 [ 98.480299] ? lock_is_held_type+0x9e/0x120 [ 98.480311] insert_inode_locked+0x25f/0x890 [ 98.480327] __ext4_new_inode+0x223d/0x4cd0 [ 98.480344] ? __pfx___ext4_new_inode+0x10/0x10 [ 98.480359] ? __pfx___dquot_initialize+0x10/0x10 [ 98.480377] ? __pfx_avc_has_perm+0x10/0x10 [ 98.480393] ext4_symlink+0x623/0xb40 [ 98.480411] ? __pfx_ext4_symlink+0x10/0x10 [ 98.480427] ? security_inode_permission+0x72/0xe0 [ 98.480440] vfs_symlink+0x44b/0x840 [ 98.480456] filename_symlinkat+0x158/0x440 [ 98.480470] ? __pfx_filename_symlinkat+0x10/0x10 [ 98.480483] ? strncpy_from_user+0x21b/0x2f0 [ 98.480500] __x64_sys_symlink+0x82/0x110 [ 98.480513] do_syscall_64+0xbf/0x420 [ 98.480526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.480539] RIP: 0033:0x7f0b6ecee427 [ 98.480548] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 98.480558] RSP: 002b:00007ffdba43e948 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 98.480569] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0b6ecee427 [ 98.480577] RDX: ffffffffffffffbc RSI: 00007f0b6ed4900e RDI: 00007f0b6ed481dd [ 98.480584] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdba43e3c0 [ 98.480591] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 98.480598] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffdba43ea10 [ 98.480608] [ 98.495960] ------------[ cut here ]------------ [ 98.522786] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.0/3945 [ 98.550845] Modules linked in: [ 98.552390] CPU: 0 UID: 0 PID: 3945 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 98.568635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 98.585389] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 98.585863] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 98.590323] RSP: 0018:ffff88804a03f9a0 EFLAGS: 00010286 [ 98.590747] RAX: 00000000ffffffff RBX: ffff888015fa5280 RCX: ffffffff815660f7 [ 98.591351] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888015fa567c [ 98.591914] RBP: ffff888015fa5280 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 98.592514] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888015fa5280 [ 98.593074] R13: 0000000000000001 R14: ffffffff85c0d650 R15: ffff88801b6f9628 [ 98.593683] FS: 000055557edd4400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 98.594366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.594827] CR2: 00007ffdba43dde8 CR3: 00000000438f6000 CR4: 0000000000350ef0 [ 98.595435] Call Trace: [ 98.595675] [ 98.596396] __wait_on_freeing_inode+0x10f/0x350 [ 98.597071] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 98.598193] ? __pfx_var_wake_function+0x10/0x10 [ 98.599411] ? lock_is_held_type+0x9e/0x120 [ 98.600541] insert_inode_locked+0x25f/0x890 [ 98.602165] __ext4_new_inode+0x223d/0x4cd0 [ 98.604584] ? __pfx___ext4_new_inode+0x10/0x10 [ 98.605798] ? __pfx___dquot_initialize+0x10/0x10 [ 98.606563] ? __pfx_avc_has_perm+0x10/0x10 [ 98.608318] ext4_symlink+0x623/0xb40 [ 98.610529] ? __pfx_ext4_symlink+0x10/0x10 [ 98.611525] ? security_inode_permission+0x72/0xe0 [ 98.613144] vfs_symlink+0x44b/0x840 [ 98.614406] filename_symlinkat+0x158/0x440 [ 98.615528] ? __pfx_filename_symlinkat+0x10/0x10 [ 98.616289] ? strncpy_from_user+0x21b/0x2f0 [ 98.618150] __x64_sys_symlink+0x82/0x110 [ 98.618858] do_syscall_64+0xbf/0x420 [ 98.619664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.620209] RIP: 0033:0x7f0b6ecee427 [ 98.620569] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 98.622048] RSP: 002b:00007ffdba43e948 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 98.622689] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0b6ecee427 [ 98.623294] RDX: ffffffffffffffbc RSI: 00007f0b6ed4900e RDI: 00007f0b6ed481dd [ 98.623860] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdba43e3c0 [ 98.624463] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 98.625022] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffdba43ea10 [ 98.627609] [ 98.627803] irq event stamp: 1615 [ 98.628082] hardirqs last enabled at (1615): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 98.628940] hardirqs last disabled at (1614): [] _raw_spin_lock_irqsave+0x53/0x60 [ 98.629760] softirqs last enabled at (1610): [] kernel_fpu_end+0x59/0x70 [ 98.630526] softirqs last disabled at (1608): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 98.631352] ---[ end trace 0000000000000000 ]--- VM DIAGNOSIS: 22:38:45 Registers: info registers vcpu 0 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88804a03f488 R8 =0000000000000000 R9 =ffffed10016e6046 R10=000000000000003a R11=666666203a302320 R12=000000000000003a R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557edd4400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffdba43dde8 CR3=00000000438f6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000411230a6dc RBX=0000000000000000 RCX=00000000000006e0 RDX=0000000000000041 RSI=ffff88806cf23d40 RDI=000000000005451b RBP=ffff88806cf23d40 RSP=ffff88806cf08ee0 R8 =0000000000000001 R9 =0000000000000000 R10=00000000000f15d4 R11=000000000000005a R12=000000000005451b R13=0000000000000000 R14=0000000000000000 R15=ffff88806cf28780 RIP=ffffffff8132f9b5 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555cbce400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f70971c96f4 CR3=000000001bd48000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000559b098695300000559b09869510 XMM06=0000559b09826a8000000003ffffffff XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000