Warning: Permanently added '[localhost]:10735' (ECDSA) to the list of known hosts. 2026/01/19 21:24:16 fuzzer started 2026/01/19 21:24:16 dialing manager at localhost:42157 syzkaller login: [ 53.713102] cgroup: Unknown subsys name 'net' [ 53.768289] cgroup: Unknown subsys name 'cpuset' [ 53.785028] cgroup: Unknown subsys name 'rlimit' 2026/01/19 21:24:29 syscalls: 209 2026/01/19 21:24:29 code coverage: enabled 2026/01/19 21:24:29 comparison tracing: enabled 2026/01/19 21:24:29 extra coverage: enabled 2026/01/19 21:24:29 setuid sandbox: enabled 2026/01/19 21:24:29 namespace sandbox: enabled 2026/01/19 21:24:29 Android sandbox: enabled 2026/01/19 21:24:29 fault injection: enabled 2026/01/19 21:24:29 leak checking: enabled 2026/01/19 21:24:29 net packet injection: enabled 2026/01/19 21:24:29 net device setup: enabled 2026/01/19 21:24:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/19 21:24:29 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/19 21:24:29 USB emulation: enabled 2026/01/19 21:24:29 hci packet injection: enabled 2026/01/19 21:24:29 wifi device emulation: enabled 2026/01/19 21:24:29 802.15.4 emulation: enabled 2026/01/19 21:24:29 fetching corpus: 0, signal 0/0 (executing program) 2026/01/19 21:24:30 starting 8 fuzzer processes 21:24:30 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000b80)) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000bc0)=r2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x10bd00, 0x0) accept4$unix(r5, &(0x7f0000000c40)=@abs, &(0x7f0000000cc0)=0x6e, 0x80800) utimensat(r5, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={{0x77359400}, {0x77359400}}, 0x100) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r5, 0x8000000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(r6, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r7, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:24:30 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x81000) r5 = semget(0x1, 0x3, 0x0) semctl$SEM_INFO(r5, 0x0, 0x13, &(0x7f00000003c0)=""/199) r6 = semget(0x1, 0x4, 0x10) r7 = geteuid() r8 = getegid() fstat(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000540)={{0x0, r7, r8, r9, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:24:30 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x81900) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x3ff, 0x7}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r8, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9e}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040040}, 0x20040890) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/124, 0x7c, 0x1, &(0x7f00000009c0)=""/118, 0x76}, &(0x7f0000000a80)=0x40) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0xaee6146d964a9b42}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 21:24:30 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) socketpair(0x5, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) accept4$unix(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x6e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000600)) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000640), 0x8) r5 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x65242) 21:24:30 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r3, r4/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x60004000) r7 = open$dir(&(0x7f0000000480)='./file0\x00', 0x400600, 0x10) open_tree(r7, &(0x7f00000004c0)='./file0\x00', 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000500)) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x48000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000580)=0x7, 0x4) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x54b800, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r6, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000740), 0x2) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000780)=""/11) 21:24:30 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000005c0)=0x800, &(0x7f0000000600)=0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x81101) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r5, 0x220, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd5, 0x7f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x44000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x8010, r3, 0x8000000) open_tree(r3, &(0x7f0000000900)='./file0\x00', 0x200) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0xa12, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000014) 21:24:30 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r5 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x61}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x26, 0x5, 0x200) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f00000012c0)) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000001840)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f0000001340)={0x484, r6, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "6bfd443e5e10aa36cf7eb1a3ddcf"}, @NL80211_ATTR_FILS_ERP_RRK={0xbc, 0xfc, "3d850ba6c7c49d05658494ebdd0e45e261a9229493a712d51247c7b91a4143701ebd51e0308355da2704db8a970e7d6c13287af50a991233852e2c6f133f8e1dc5197bf0867b41be8311f5faaded64014513df68eab67b1a6186d44494841941115ea599c4c01461829044746a1135a9236b806455a693bdbfb2715e5fc9e9ff1ee1472c3df6345994e25db5e100a50a53bc171124d1923b4eddb15e63a734688f0ee2784fd0ed4f7506b26e34d1558b42018c6f06932a87"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "af162270853097eacc"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "b0"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x40}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "4ebb82dac6e4887161e611cd3c9099f4c2d409dba93aeafe16efe1c47047259539cbf5529805e21c99e29c12bd1166438196c17c673d93a91fc339e80a4c1a95ca6f07f491e40a6165d69c336c3f03cc2e8d5641cba92559e76b4fe629599aa7927adf972d966a4e0971accea19f0d6e9f6b12e11ea5a8a524c9a760e0a665e7c521560229ce355632bd3af8d34207900931e549b857d87cb6a471fb9e569701a0a54c"}], @NL80211_ATTR_IE={0x182, 0x2a, [@peer_mgmt={0x75, 0x18, {0x0, 0x5, @val=0x4, @val=0x18, @val="bfb31335d620e152ad19e2d3dd643b8d"}}, @random={0x3, 0x1e, "47b2bbf26d3ec60ee9d8e29d0c5e3f1e013fc68578fc57d95c2e91b0aea3"}, @random_vendor={0xdd, 0xb3, "ed590800ed85136948b7cc7a7dd5d7bf571cbff1156fdf479d70e56e16b84424517d9aeff77ea85120bef48c60bb30fd9df32e43ec06a4eff5a7fd20341bb9a0e91b4b9baa83215b468f90b092220cca1e01ddad356d4b32f0f4b59734554dd7490ead2512f86ff9092e30ffae30eceb8fde2f92708925798e3f8de39d18bea4b4e6d427b9ac55513d62fa85544cfc3a08aa40725c30d46f3df6af4b3c564d2b597034ff1c7174677d71536d3d20b3ba21678c"}, @fast_bss_trans={0x37, 0x87, {0x81, 0x2, "ba67446a229d626e1d18b3ad8ac738a3", "e7634daa3e122268d77eb63a7588e56ad895443bc4057766a9b66fb2d178b0a0", "2220c6b4f42b9fb41e8210b03d8da337d65ffe0ec5bea09227f35f03436cf40b", [{0x3, 0x16, "32c71db315d4288f5ebfe06b9eada3103ee029d52e7a"}, {0x4, 0x1b, "7550f5b9dee1c5bb8fbdab47bb74f23fe64ff76fcc26919ed3098c"}]}}, @challenge={0x10, 0x1, 0x7e}, @challenge={0x10, 0x1, 0x6c}]}, @NL80211_ATTR_IE={0x13c, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @mesh_chsw={0x76, 0x6, {0x2, 0x2, 0x1c, 0xfc7c}}, @measure_req={0x26, 0x96, {0x5, 0x3, 0x35, "e5e681bdbf3d5648549d74b07951c1b97a9e5c85e86fc28d2f259fc2555e3c1d8cd658bebc244a0c54c8fa07dbe5c0473ba4f595a2595c0651d9c109754f3cbd5b52ae90df03d9c3ddce296e01413bf19d2eb173756d5c2872689e75210dbdcf3e266d1424cd160737483ff66fefd78c39b840b809ac1a4d07ac7dcfd5d19a3ae65d7fca2f0ac3d74ca3c90c64f473eed4836a"}}, @ibss={0x6, 0x2, 0xfffc}, @tim={0x5, 0x8a, {0x6, 0x4a, 0x5, "f0e31752f566099ddbbe3ff8a9fac8f110b83ef44c3f6b4fd6d269e92d3f58f75c523afae78ad507576212f6618935b465081057d1a0a0cf6c54ed26e35c0b2cc800d73fc268d894a5db11703e273f6705022db217d258cc0d8b3950c0eb569411ee0a915922759613e0cb07754a324baa1ec583b2ae2f3691db35460b9bdc4bb2bac557464cbd"}}]}]}, 0x484}, 0x1, 0x0, 0x0, 0x40008000}, 0x44040) 21:24:30 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="39bae7efdbc5"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x841) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc841}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r4, 0x2, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) [ 63.989522] audit: type=1400 audit(1768857870.644:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 65.205600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.207590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.209966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.212852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.215703] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.219620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.220394] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.223698] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.226716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.227738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.232560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.244378] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.255934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.257118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.273797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.287740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.291110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.293568] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.299793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.302715] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.316945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.320940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.325723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.327569] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.331567] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.331584] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.346789] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.354534] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.362122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.363695] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.366615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.369116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.370871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.375030] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.376153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.379839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.388228] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.389275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.405954] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.407040] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 67.284995] Bluetooth: hci1: command tx timeout [ 67.350105] Bluetooth: hci3: command tx timeout [ 67.350286] Bluetooth: hci2: command tx timeout [ 67.414771] Bluetooth: hci5: command tx timeout [ 67.416202] Bluetooth: hci0: command tx timeout [ 67.477621] Bluetooth: hci7: command tx timeout [ 67.477728] Bluetooth: hci6: command tx timeout [ 67.480033] Bluetooth: hci4: command tx timeout [ 69.332623] Bluetooth: hci1: command tx timeout [ 69.396463] Bluetooth: hci3: command tx timeout [ 69.396546] Bluetooth: hci2: command tx timeout [ 69.461424] Bluetooth: hci5: command tx timeout [ 69.461510] Bluetooth: hci0: command tx timeout [ 69.524826] Bluetooth: hci6: command tx timeout [ 69.524861] Bluetooth: hci7: command tx timeout [ 69.525235] Bluetooth: hci4: command tx timeout [ 71.381585] Bluetooth: hci1: command tx timeout [ 71.445524] Bluetooth: hci2: command tx timeout [ 71.447508] Bluetooth: hci3: command tx timeout [ 71.508488] Bluetooth: hci5: command tx timeout [ 71.509464] Bluetooth: hci0: command tx timeout [ 71.572572] Bluetooth: hci7: command tx timeout [ 71.572957] Bluetooth: hci6: command tx timeout [ 71.573457] Bluetooth: hci4: command tx timeout [ 73.429603] Bluetooth: hci1: command tx timeout [ 73.492797] Bluetooth: hci3: command tx timeout [ 73.492876] Bluetooth: hci2: command tx timeout [ 73.557091] Bluetooth: hci0: command tx timeout [ 73.557952] Bluetooth: hci5: command tx timeout [ 73.621095] Bluetooth: hci4: command tx timeout [ 73.621130] Bluetooth: hci6: command tx timeout [ 73.621639] Bluetooth: hci7: command tx timeout [ 99.991869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.992521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.200620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.201217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.381717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.382340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.472044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.472791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.572630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.573232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.758351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.760741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.908898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.910525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.029280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.029913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.107138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.108229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.142310] loop0: detected capacity change from 0 to 7 [ 101.205191] loop0: detected capacity change from 0 to 7 [ 101.286826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.287480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.349882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.350869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.467364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.468019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.579849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.580497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.637028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.637637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.722428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.723045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.741136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.741719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:25:21 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r3, r4/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x60004000) r7 = open$dir(&(0x7f0000000480)='./file0\x00', 0x400600, 0x10) open_tree(r7, &(0x7f00000004c0)='./file0\x00', 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000500)) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x48000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000580)=0x7, 0x4) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x54b800, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r6, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000740), 0x2) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000780)=""/11) 21:25:21 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) socketpair(0x5, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) accept4$unix(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x6e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000600)) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000640), 0x8) r5 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x65242) 21:25:21 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000005c0)=0x800, &(0x7f0000000600)=0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x81101) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r5, 0x220, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd5, 0x7f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x44000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x8010, r3, 0x8000000) open_tree(r3, &(0x7f0000000900)='./file0\x00', 0x200) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0xa12, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000014) 21:25:21 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="39bae7efdbc5"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x841) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc841}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r4, 0x2, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 21:25:21 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x81000) r5 = semget(0x1, 0x3, 0x0) semctl$SEM_INFO(r5, 0x0, 0x13, &(0x7f00000003c0)=""/199) r6 = semget(0x1, 0x4, 0x10) r7 = geteuid() r8 = getegid() fstat(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000540)={{0x0, r7, r8, r9, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:25:21 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x81900) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x3ff, 0x7}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r8, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9e}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040040}, 0x20040890) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/124, 0x7c, 0x1, &(0x7f00000009c0)=""/118, 0x76}, &(0x7f0000000a80)=0x40) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0xaee6146d964a9b42}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 21:25:21 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r5 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x61}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x26, 0x5, 0x200) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f00000012c0)) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000001840)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f0000001340)={0x484, r6, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "6bfd443e5e10aa36cf7eb1a3ddcf"}, @NL80211_ATTR_FILS_ERP_RRK={0xbc, 0xfc, "3d850ba6c7c49d05658494ebdd0e45e261a9229493a712d51247c7b91a4143701ebd51e0308355da2704db8a970e7d6c13287af50a991233852e2c6f133f8e1dc5197bf0867b41be8311f5faaded64014513df68eab67b1a6186d44494841941115ea599c4c01461829044746a1135a9236b806455a693bdbfb2715e5fc9e9ff1ee1472c3df6345994e25db5e100a50a53bc171124d1923b4eddb15e63a734688f0ee2784fd0ed4f7506b26e34d1558b42018c6f06932a87"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "af162270853097eacc"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "b0"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x40}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "4ebb82dac6e4887161e611cd3c9099f4c2d409dba93aeafe16efe1c47047259539cbf5529805e21c99e29c12bd1166438196c17c673d93a91fc339e80a4c1a95ca6f07f491e40a6165d69c336c3f03cc2e8d5641cba92559e76b4fe629599aa7927adf972d966a4e0971accea19f0d6e9f6b12e11ea5a8a524c9a760e0a665e7c521560229ce355632bd3af8d34207900931e549b857d87cb6a471fb9e569701a0a54c"}], @NL80211_ATTR_IE={0x182, 0x2a, [@peer_mgmt={0x75, 0x18, {0x0, 0x5, @val=0x4, @val=0x18, @val="bfb31335d620e152ad19e2d3dd643b8d"}}, @random={0x3, 0x1e, "47b2bbf26d3ec60ee9d8e29d0c5e3f1e013fc68578fc57d95c2e91b0aea3"}, @random_vendor={0xdd, 0xb3, "ed590800ed85136948b7cc7a7dd5d7bf571cbff1156fdf479d70e56e16b84424517d9aeff77ea85120bef48c60bb30fd9df32e43ec06a4eff5a7fd20341bb9a0e91b4b9baa83215b468f90b092220cca1e01ddad356d4b32f0f4b59734554dd7490ead2512f86ff9092e30ffae30eceb8fde2f92708925798e3f8de39d18bea4b4e6d427b9ac55513d62fa85544cfc3a08aa40725c30d46f3df6af4b3c564d2b597034ff1c7174677d71536d3d20b3ba21678c"}, @fast_bss_trans={0x37, 0x87, {0x81, 0x2, "ba67446a229d626e1d18b3ad8ac738a3", "e7634daa3e122268d77eb63a7588e56ad895443bc4057766a9b66fb2d178b0a0", "2220c6b4f42b9fb41e8210b03d8da337d65ffe0ec5bea09227f35f03436cf40b", [{0x3, 0x16, "32c71db315d4288f5ebfe06b9eada3103ee029d52e7a"}, {0x4, 0x1b, "7550f5b9dee1c5bb8fbdab47bb74f23fe64ff76fcc26919ed3098c"}]}}, @challenge={0x10, 0x1, 0x7e}, @challenge={0x10, 0x1, 0x6c}]}, @NL80211_ATTR_IE={0x13c, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @mesh_chsw={0x76, 0x6, {0x2, 0x2, 0x1c, 0xfc7c}}, @measure_req={0x26, 0x96, {0x5, 0x3, 0x35, "e5e681bdbf3d5648549d74b07951c1b97a9e5c85e86fc28d2f259fc2555e3c1d8cd658bebc244a0c54c8fa07dbe5c0473ba4f595a2595c0651d9c109754f3cbd5b52ae90df03d9c3ddce296e01413bf19d2eb173756d5c2872689e75210dbdcf3e266d1424cd160737483ff66fefd78c39b840b809ac1a4d07ac7dcfd5d19a3ae65d7fca2f0ac3d74ca3c90c64f473eed4836a"}}, @ibss={0x6, 0x2, 0xfffc}, @tim={0x5, 0x8a, {0x6, 0x4a, 0x5, "f0e31752f566099ddbbe3ff8a9fac8f110b83ef44c3f6b4fd6d269e92d3f58f75c523afae78ad507576212f6618935b465081057d1a0a0cf6c54ed26e35c0b2cc800d73fc268d894a5db11703e273f6705022db217d258cc0d8b3950c0eb569411ee0a915922759613e0cb07754a324baa1ec583b2ae2f3691db35460b9bdc4bb2bac557464cbd"}}]}]}, 0x484}, 0x1, 0x0, 0x0, 0x40008000}, 0x44040) 21:25:22 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000b80)) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000bc0)=r2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x10bd00, 0x0) accept4$unix(r5, &(0x7f0000000c40)=@abs, &(0x7f0000000cc0)=0x6e, 0x80800) utimensat(r5, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={{0x77359400}, {0x77359400}}, 0x100) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r5, 0x8000000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(r6, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r7, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:25:22 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x81000) r5 = semget(0x1, 0x3, 0x0) semctl$SEM_INFO(r5, 0x0, 0x13, &(0x7f00000003c0)=""/199) r6 = semget(0x1, 0x4, 0x10) r7 = geteuid() r8 = getegid() fstat(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000540)={{0x0, r7, r8, r9, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 115.438380] loop0: detected capacity change from 0 to 7 21:25:22 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000005c0)=0x800, &(0x7f0000000600)=0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x81101) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r5, 0x220, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd5, 0x7f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x44000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x8010, r3, 0x8000000) open_tree(r3, &(0x7f0000000900)='./file0\x00', 0x200) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0xa12, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000014) 21:25:22 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r3, r4/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x60004000) r7 = open$dir(&(0x7f0000000480)='./file0\x00', 0x400600, 0x10) open_tree(r7, &(0x7f00000004c0)='./file0\x00', 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000500)) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x48000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000580)=0x7, 0x4) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x54b800, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r6, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000740), 0x2) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000780)=""/11) 21:25:31 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x81000) r5 = semget(0x1, 0x3, 0x0) semctl$SEM_INFO(r5, 0x0, 0x13, &(0x7f00000003c0)=""/199) r6 = semget(0x1, 0x4, 0x10) r7 = geteuid() r8 = getegid() fstat(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000540)={{0x0, r7, r8, r9, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:25:31 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000005c0)=0x800, &(0x7f0000000600)=0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x81101) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r5, 0x220, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd5, 0x7f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x44000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x8010, r3, 0x8000000) open_tree(r3, &(0x7f0000000900)='./file0\x00', 0x200) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0xa12, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000014) 21:25:31 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x81900) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x3ff, 0x7}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r8, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9e}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040040}, 0x20040890) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/124, 0x7c, 0x1, &(0x7f00000009c0)=""/118, 0x76}, &(0x7f0000000a80)=0x40) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0xaee6146d964a9b42}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 21:25:31 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000b80)) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000bc0)=r2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x10bd00, 0x0) accept4$unix(r5, &(0x7f0000000c40)=@abs, &(0x7f0000000cc0)=0x6e, 0x80800) utimensat(r5, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={{0x77359400}, {0x77359400}}, 0x100) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r5, 0x8000000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(r6, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r7, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:25:31 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r3, r4/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x60004000) r7 = open$dir(&(0x7f0000000480)='./file0\x00', 0x400600, 0x10) open_tree(r7, &(0x7f00000004c0)='./file0\x00', 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000500)) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x48000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000580)=0x7, 0x4) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x54b800, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r6, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000740), 0x2) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000780)=""/11) 21:25:31 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="39bae7efdbc5"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x841) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc841}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r4, 0x2, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 21:25:31 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r5 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x61}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x26, 0x5, 0x200) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f00000012c0)) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000001840)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f0000001340)={0x484, r6, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "6bfd443e5e10aa36cf7eb1a3ddcf"}, @NL80211_ATTR_FILS_ERP_RRK={0xbc, 0xfc, "3d850ba6c7c49d05658494ebdd0e45e261a9229493a712d51247c7b91a4143701ebd51e0308355da2704db8a970e7d6c13287af50a991233852e2c6f133f8e1dc5197bf0867b41be8311f5faaded64014513df68eab67b1a6186d44494841941115ea599c4c01461829044746a1135a9236b806455a693bdbfb2715e5fc9e9ff1ee1472c3df6345994e25db5e100a50a53bc171124d1923b4eddb15e63a734688f0ee2784fd0ed4f7506b26e34d1558b42018c6f06932a87"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "af162270853097eacc"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "b0"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x40}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "4ebb82dac6e4887161e611cd3c9099f4c2d409dba93aeafe16efe1c47047259539cbf5529805e21c99e29c12bd1166438196c17c673d93a91fc339e80a4c1a95ca6f07f491e40a6165d69c336c3f03cc2e8d5641cba92559e76b4fe629599aa7927adf972d966a4e0971accea19f0d6e9f6b12e11ea5a8a524c9a760e0a665e7c521560229ce355632bd3af8d34207900931e549b857d87cb6a471fb9e569701a0a54c"}], @NL80211_ATTR_IE={0x182, 0x2a, [@peer_mgmt={0x75, 0x18, {0x0, 0x5, @val=0x4, @val=0x18, @val="bfb31335d620e152ad19e2d3dd643b8d"}}, @random={0x3, 0x1e, "47b2bbf26d3ec60ee9d8e29d0c5e3f1e013fc68578fc57d95c2e91b0aea3"}, @random_vendor={0xdd, 0xb3, "ed590800ed85136948b7cc7a7dd5d7bf571cbff1156fdf479d70e56e16b84424517d9aeff77ea85120bef48c60bb30fd9df32e43ec06a4eff5a7fd20341bb9a0e91b4b9baa83215b468f90b092220cca1e01ddad356d4b32f0f4b59734554dd7490ead2512f86ff9092e30ffae30eceb8fde2f92708925798e3f8de39d18bea4b4e6d427b9ac55513d62fa85544cfc3a08aa40725c30d46f3df6af4b3c564d2b597034ff1c7174677d71536d3d20b3ba21678c"}, @fast_bss_trans={0x37, 0x87, {0x81, 0x2, "ba67446a229d626e1d18b3ad8ac738a3", "e7634daa3e122268d77eb63a7588e56ad895443bc4057766a9b66fb2d178b0a0", "2220c6b4f42b9fb41e8210b03d8da337d65ffe0ec5bea09227f35f03436cf40b", [{0x3, 0x16, "32c71db315d4288f5ebfe06b9eada3103ee029d52e7a"}, {0x4, 0x1b, "7550f5b9dee1c5bb8fbdab47bb74f23fe64ff76fcc26919ed3098c"}]}}, @challenge={0x10, 0x1, 0x7e}, @challenge={0x10, 0x1, 0x6c}]}, @NL80211_ATTR_IE={0x13c, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @mesh_chsw={0x76, 0x6, {0x2, 0x2, 0x1c, 0xfc7c}}, @measure_req={0x26, 0x96, {0x5, 0x3, 0x35, "e5e681bdbf3d5648549d74b07951c1b97a9e5c85e86fc28d2f259fc2555e3c1d8cd658bebc244a0c54c8fa07dbe5c0473ba4f595a2595c0651d9c109754f3cbd5b52ae90df03d9c3ddce296e01413bf19d2eb173756d5c2872689e75210dbdcf3e266d1424cd160737483ff66fefd78c39b840b809ac1a4d07ac7dcfd5d19a3ae65d7fca2f0ac3d74ca3c90c64f473eed4836a"}}, @ibss={0x6, 0x2, 0xfffc}, @tim={0x5, 0x8a, {0x6, 0x4a, 0x5, "f0e31752f566099ddbbe3ff8a9fac8f110b83ef44c3f6b4fd6d269e92d3f58f75c523afae78ad507576212f6618935b465081057d1a0a0cf6c54ed26e35c0b2cc800d73fc268d894a5db11703e273f6705022db217d258cc0d8b3950c0eb569411ee0a915922759613e0cb07754a324baa1ec583b2ae2f3691db35460b9bdc4bb2bac557464cbd"}}]}]}, 0x484}, 0x1, 0x0, 0x0, 0x40008000}, 0x44040) 21:25:31 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) socketpair(0x5, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) accept4$unix(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x6e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000600)) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000640), 0x8) r5 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x65242) 21:25:31 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000005c0)=0x800, &(0x7f0000000600)=0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x81101) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r5, 0x220, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd5, 0x7f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x44000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x8010, r3, 0x8000000) open_tree(r3, &(0x7f0000000900)='./file0\x00', 0x200) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) [ 124.876817] loop0: detected capacity change from 0 to 7 21:25:31 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r3, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x81000) r4 = semget(0x1, 0x3, 0x0) semctl$SEM_INFO(r4, 0x0, 0x13, &(0x7f00000003c0)=""/199) r5 = semget(0x1, 0x4, 0x10) r6 = geteuid() r7 = getegid() semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000540)={{0x0, r6, r7, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:25:31 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) socketpair(0x5, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) accept4$unix(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x6e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000600)) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000640), 0x8) r5 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x65242) 21:25:31 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r3, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x81000) r4 = semget(0x1, 0x3, 0x0) semctl$SEM_INFO(r4, 0x0, 0x13, &(0x7f00000003c0)=""/199) r5 = semget(0x1, 0x4, 0x10) r6 = geteuid() semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000540)={{0x0, r6, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:25:31 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r3, r4/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x60004000) r7 = open$dir(&(0x7f0000000480)='./file0\x00', 0x400600, 0x10) open_tree(r7, &(0x7f00000004c0)='./file0\x00', 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000500)) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x48000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000580)=0x7, 0x4) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x54b800, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r6, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000740), 0x2) 21:25:31 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000005c0)=0x800, &(0x7f0000000600)=0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x81101) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r5, 0x220, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd5, 0x7f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x44000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x8010, r3, 0x8000000) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) 21:25:31 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000b80)) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000bc0)=r2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x10bd00, 0x0) accept4$unix(r5, &(0x7f0000000c40)=@abs, &(0x7f0000000cc0)=0x6e, 0x80800) utimensat(r5, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={{0x77359400}, {0x77359400}}, 0x100) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r5, 0x8000000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(r6, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r7, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:25:31 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="39bae7efdbc5"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x841) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc841}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r4, 0x2, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) [ 125.362148] loop0: detected capacity change from 0 to 7 21:25:32 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x81900) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x3ff, 0x7}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r8, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9e}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040040}, 0x20040890) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/124, 0x7c, 0x1, &(0x7f00000009c0)=""/118, 0x76}, &(0x7f0000000a80)=0x40) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0xaee6146d964a9b42}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xc0) 21:25:41 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x81900) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x3ff, 0x7}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r8, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9e}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040040}, 0x20040890) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/124, 0x7c, 0x1, &(0x7f00000009c0)=""/118, 0x76}, &(0x7f0000000a80)=0x40) 21:25:41 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000005c0)=0x800, &(0x7f0000000600)=0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x81101) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r5, 0x220, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd5, 0x7f}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x44000) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) 21:25:41 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="39bae7efdbc5"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x841) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc841}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:25:41 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r3, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x81000) r4 = semget(0x1, 0x3, 0x0) semctl$SEM_INFO(r4, 0x0, 0x13, &(0x7f00000003c0)=""/199) r5 = semget(0x1, 0x4, 0x10) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:25:41 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r3, r4/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x60004000) r7 = open$dir(&(0x7f0000000480)='./file0\x00', 0x400600, 0x10) open_tree(r7, &(0x7f00000004c0)='./file0\x00', 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000500)) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x48000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000580)=0x7, 0x4) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x54b800, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r9, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r6, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:25:41 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) socketpair(0x5, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) accept4$unix(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x6e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000600)) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000640), 0x8) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x65242) 21:25:41 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000b80)) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000bc0)=r2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x10bd00, 0x0) accept4$unix(r5, &(0x7f0000000c40)=@abs, &(0x7f0000000cc0)=0x6e, 0x80800) utimensat(r5, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={{0x77359400}, {0x77359400}}, 0x100) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r5, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:25:41 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r5 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x61}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x26, 0x5, 0x200) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f00000012c0)) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, &(0x7f0000001840)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f0000001340)={0x484, r6, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "6bfd443e5e10aa36cf7eb1a3ddcf"}, @NL80211_ATTR_FILS_ERP_RRK={0xbc, 0xfc, "3d850ba6c7c49d05658494ebdd0e45e261a9229493a712d51247c7b91a4143701ebd51e0308355da2704db8a970e7d6c13287af50a991233852e2c6f133f8e1dc5197bf0867b41be8311f5faaded64014513df68eab67b1a6186d44494841941115ea599c4c01461829044746a1135a9236b806455a693bdbfb2715e5fc9e9ff1ee1472c3df6345994e25db5e100a50a53bc171124d1923b4eddb15e63a734688f0ee2784fd0ed4f7506b26e34d1558b42018c6f06932a87"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "af162270853097eacc"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7f}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "b0"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x40}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xa7, 0xfa, "4ebb82dac6e4887161e611cd3c9099f4c2d409dba93aeafe16efe1c47047259539cbf5529805e21c99e29c12bd1166438196c17c673d93a91fc339e80a4c1a95ca6f07f491e40a6165d69c336c3f03cc2e8d5641cba92559e76b4fe629599aa7927adf972d966a4e0971accea19f0d6e9f6b12e11ea5a8a524c9a760e0a665e7c521560229ce355632bd3af8d34207900931e549b857d87cb6a471fb9e569701a0a54c"}], @NL80211_ATTR_IE={0x182, 0x2a, [@peer_mgmt={0x75, 0x18, {0x0, 0x5, @val=0x4, @val=0x18, @val="bfb31335d620e152ad19e2d3dd643b8d"}}, @random={0x3, 0x1e, "47b2bbf26d3ec60ee9d8e29d0c5e3f1e013fc68578fc57d95c2e91b0aea3"}, @random_vendor={0xdd, 0xb3, "ed590800ed85136948b7cc7a7dd5d7bf571cbff1156fdf479d70e56e16b84424517d9aeff77ea85120bef48c60bb30fd9df32e43ec06a4eff5a7fd20341bb9a0e91b4b9baa83215b468f90b092220cca1e01ddad356d4b32f0f4b59734554dd7490ead2512f86ff9092e30ffae30eceb8fde2f92708925798e3f8de39d18bea4b4e6d427b9ac55513d62fa85544cfc3a08aa40725c30d46f3df6af4b3c564d2b597034ff1c7174677d71536d3d20b3ba21678c"}, @fast_bss_trans={0x37, 0x87, {0x81, 0x2, "ba67446a229d626e1d18b3ad8ac738a3", "e7634daa3e122268d77eb63a7588e56ad895443bc4057766a9b66fb2d178b0a0", "2220c6b4f42b9fb41e8210b03d8da337d65ffe0ec5bea09227f35f03436cf40b", [{0x3, 0x16, "32c71db315d4288f5ebfe06b9eada3103ee029d52e7a"}, {0x4, 0x1b, "7550f5b9dee1c5bb8fbdab47bb74f23fe64ff76fcc26919ed3098c"}]}}, @challenge={0x10, 0x1, 0x7e}, @challenge={0x10, 0x1, 0x6c}]}, @NL80211_ATTR_IE={0x13c, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @mesh_chsw={0x76, 0x6, {0x2, 0x2, 0x1c, 0xfc7c}}, @measure_req={0x26, 0x96, {0x5, 0x3, 0x35, "e5e681bdbf3d5648549d74b07951c1b97a9e5c85e86fc28d2f259fc2555e3c1d8cd658bebc244a0c54c8fa07dbe5c0473ba4f595a2595c0651d9c109754f3cbd5b52ae90df03d9c3ddce296e01413bf19d2eb173756d5c2872689e75210dbdcf3e266d1424cd160737483ff66fefd78c39b840b809ac1a4d07ac7dcfd5d19a3ae65d7fca2f0ac3d74ca3c90c64f473eed4836a"}}, @ibss={0x6, 0x2, 0xfffc}, @tim={0x5, 0x8a, {0x6, 0x4a, 0x5, "f0e31752f566099ddbbe3ff8a9fac8f110b83ef44c3f6b4fd6d269e92d3f58f75c523afae78ad507576212f6618935b465081057d1a0a0cf6c54ed26e35c0b2cc800d73fc268d894a5db11703e273f6705022db217d258cc0d8b3950c0eb569411ee0a915922759613e0cb07754a324baa1ec583b2ae2f3691db35460b9bdc4bb2bac557464cbd"}}]}]}, 0x484}, 0x1, 0x0, 0x0, 0x40008000}, 0x44040) [ 134.685250] loop0: detected capacity change from 0 to 7 21:25:41 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000005c0)=0x800, &(0x7f0000000600)=0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x81101) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r2) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) 21:25:41 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r3, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x81000) r4 = semget(0x1, 0x3, 0x0) semctl$SEM_INFO(r4, 0x0, 0x13, &(0x7f00000003c0)=""/199) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:25:41 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r3, r4/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x60004000) r7 = open$dir(&(0x7f0000000480)='./file0\x00', 0x400600, 0x10) open_tree(r7, &(0x7f00000004c0)='./file0\x00', 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000500)) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x48000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000580)=0x7, 0x4) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r6, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:25:41 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000b80)) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000bc0)=r2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x10bd00, 0x0) accept4$unix(r5, &(0x7f0000000c40)=@abs, &(0x7f0000000cc0)=0x6e, 0x80800) utimensat(r5, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={{0x77359400}, {0x77359400}}, 0x100) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r5, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:25:41 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) socketpair(0x5, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) accept4$unix(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x6e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000600)) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000640), 0x8) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x65242) [ 135.092844] loop0: detected capacity change from 0 to 7 21:25:41 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r3, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x81000) semget(0x1, 0x3, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:25:41 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000005c0)=0x800, &(0x7f0000000600)=0x4) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x81101) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) 21:25:41 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="39bae7efdbc5"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x841) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc841}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:25:41 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x81900) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x3ff, 0x7}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x68, r8, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9e}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040040}, 0x20040890) 21:25:41 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r3, &(0x7f0000000300), &(0x7f0000000380)=0x6e, 0x81000) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:25:41 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000b80)) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000bc0)=r2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x10bd00, 0x0) accept4$unix(r5, &(0x7f0000000c40)=@abs, &(0x7f0000000cc0)=0x6e, 0x80800) utimensat(r5, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={{0x77359400}, {0x77359400}}, 0x100) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x2010, r5, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:25:42 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r3, r4/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x60004000) r7 = open$dir(&(0x7f0000000480)='./file0\x00', 0x400600, 0x10) open_tree(r7, &(0x7f00000004c0)='./file0\x00', 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000500)) openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x48000, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r6, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:25:42 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000005c0)=0x800, &(0x7f0000000600)=0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x81101) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) [ 135.453490] loop0: detected capacity change from 0 to 7 21:25:50 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) socketpair(0x5, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) accept4$unix(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x6e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000600)) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000640), 0x8) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x65242) 21:25:50 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r5 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x61}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x26, 0x5, 0x200) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f00000012c0)) 21:25:50 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r3, r4/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x60004000) r7 = open$dir(&(0x7f0000000480)='./file0\x00', 0x400600, 0x10) open_tree(r7, &(0x7f00000004c0)='./file0\x00', 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000500)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r6, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:25:50 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000005c0)=0x800, &(0x7f0000000600)=0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) 21:25:50 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x81900) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x3ff, 0x7}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000800)) 21:25:50 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="39bae7efdbc5"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x841) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc841}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:25:50 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:25:50 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000b80)) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000bc0)=r2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x10bd00, 0x0) accept4$unix(r5, &(0x7f0000000c40)=@abs, &(0x7f0000000cc0)=0x6e, 0x80800) utimensat(r5, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={{0x77359400}, {0x77359400}}, 0x100) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r6, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) [ 143.460461] loop0: detected capacity change from 0 to 7 21:25:50 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r2, r3/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x60004000) r6 = open$dir(&(0x7f0000000480)='./file0\x00', 0x400600, 0x10) open_tree(r6, &(0x7f00000004c0)='./file0\x00', 0x1) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r5, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:25:59 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) socketpair(0x5, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) accept4$unix(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x6e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000600)) r5 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x65242) 21:25:59 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000280)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:25:59 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) 21:25:59 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="39bae7efdbc5"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x841) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc841}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:25:59 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r2, r3/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x60004000) open$dir(&(0x7f0000000480)='./file0\x00', 0x400600, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r5, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:25:59 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000b80)) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000bc0)=r2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x10bd00, 0x0) accept4$unix(r5, &(0x7f0000000c40)=@abs, &(0x7f0000000cc0)=0x6e, 0x80800) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r6, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:25:59 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x81900) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x3ff, 0x7}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) 21:25:59 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r5 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x61}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket(0x26, 0x5, 0x200) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f00000012c0)) [ 152.726288] loop0: detected capacity change from 0 to 7 21:25:59 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), 0xffffffffffffffff) 21:25:59 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:25:59 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r2, r3/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x60004000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r5, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:25:59 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000b80)) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000bc0)=r2) openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x10bd00, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r5, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:25:59 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) socketpair(0x5, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) accept4$unix(r2, &(0x7f0000000540), &(0x7f00000005c0)=0x6e, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x65242) 21:25:59 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="39bae7efdbc5"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x841) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:25:59 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget(0x0, 0x1, 0x14) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/98) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:25:59 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), 0xffffffffffffffff) [ 153.200659] loop0: detected capacity change from 0 to 7 21:25:59 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x81900) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x3ff, 0x7}}, './file0\x00'}) 21:25:59 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r2, r3/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, r4, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:26:09 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4040894) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), 0xffffffffffffffff) 21:26:09 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="39bae7efdbc5"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x841) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:26:09 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) semget(0x0, 0x1, 0x14) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:26:09 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) socketpair(0x5, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r5 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x65242) 21:26:09 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000b80)) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000bc0)=r2) openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x10bd00, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r5, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:26:09 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r2, r3/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:26:09 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r5 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x20, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x61}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x26, 0x5, 0x200) 21:26:09 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x81900) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) [ 162.655348] loop0: detected capacity change from 0 to 7 21:26:09 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) r1 = semget$private(0x0, 0x3, 0x10) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:26:09 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000200)=[{{}, 0x1, 0xfffc, 0x1f}, {{0x0, 0xea60}, 0x11, 0xb933, 0x401}, {{r2, r3/1000+60000}, 0x0, 0x769, 0x401}, {{}, 0x1, 0x3, 0x3}, {{0x0, 0x2710}, 0x1f, 0x800}, {{0x77359400}, 0xc, 0xfffe, 0x5}, {{0x77359400}, 0x15, 0x6, 0x401}, {{0x77359400}, 0x11, 0xfffc, 0xfff}, {{0x0, 0xea60}, 0x5, 0x200, 0x7f}], 0xd8) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:26:09 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000440)=0x7ff, 0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r3) 21:26:09 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) socketpair(0x5, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r4, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0x65242) 21:26:09 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f0000000b80)) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000bc0)=r2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r5, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:26:09 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x81900) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44041) 21:26:09 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) semget$private(0x0, 0x3, 0x10) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:26:09 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) clock_gettime(0x0, &(0x7f00000001c0)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:26:09 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x48, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="39bae7efdbc5"}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:26:09 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x600, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r2) [ 163.001665] loop0: detected capacity change from 0 to 7 21:26:09 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$SEM_INFO(r0, 0x2, 0x13, &(0x7f00000001c0)=""/55) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:26:09 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) socketpair(0x5, 0x3, 0x4, &(0x7f00000003c0)) r4 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x65242) 21:26:09 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r2) 21:26:09 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) syz_open_dev$evdev(&(0x7f0000000180), 0xffffffffffffffff, 0x105040) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:26:09 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0x8000, 0x1800}, {0x0, 0x7}, {0x4, 0x0, 0x800}, {0x0, 0xd45}, {0x4, 0x4}, {0x5, 0x4}], 0x6, &(0x7f0000000180)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:26:09 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r5 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) socket(0x26, 0x5, 0x200) 21:26:18 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:26:18 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r5 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r5) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, r6, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) socket(0x26, 0x5, 0x200) 21:26:18 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x65242) 21:26:18 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) r0 = semget$private(0x0, 0x2, 0x0) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000100)=0x7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:26:18 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000b80)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r3, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:26:18 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r1) 21:26:18 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x401, 0x8000, 0x7fff, 0x9, 0x272, 0x2}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:26:18 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x81900) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) [ 172.314285] loop0: detected capacity change from 0 to 7 21:26:19 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x400202, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:26:19 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) semget$private(0x0, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:26:19 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r1) 21:26:19 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x24100, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x65242) 21:26:19 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x0, 0x720, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}, 0x1, 0x0, 0x0, 0x40445}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r1) 21:26:28 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x81900) 21:26:28 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000b80)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r3, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:26:28 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) 21:26:28 executing program 4: semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/214) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:26:28 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r4 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r4) socket(0x26, 0x5, 0x200) 21:26:28 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:26:28 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000300)={0x8, 0x2}, 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x65242) 21:26:28 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88100) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) [ 181.794070] loop0: detected capacity change from 0 to 7 [ 187.799357] Bluetooth: hci7: command 0x0406 tx timeout [ 187.800884] Bluetooth: hci3: command 0x0406 tx timeout [ 187.802103] Bluetooth: hci5: command 0x0406 tx timeout [ 187.803104] Bluetooth: hci0: command 0x0406 tx timeout [ 187.804083] Bluetooth: hci4: command 0x0406 tx timeout [ 187.805060] Bluetooth: hci2: command 0x0406 tx timeout [ 187.806079] Bluetooth: hci1: command 0x0406 tx timeout [ 187.808502] Bluetooth: hci6: command 0x0406 tx timeout 21:26:37 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x28, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:26:37 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) write$evdev(0xffffffffffffffff, &(0x7f0000000080), 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:26:37 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r4 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r4) socket(0x26, 0x5, 0x200) 21:26:37 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) r3 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x65242) 21:26:37 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:26:37 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) read$usbmon(0xffffffffffffffff, &(0x7f0000000040)=""/81, 0x51) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) 21:26:37 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:26:37 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r3) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r1, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5a}}}}, [@NL80211_ATTR_IE={0x60, 0x2a, [@measure_req={0x26, 0x3d, {0x1, 0x40, 0x1, "665cb96a25e597d1651833157214b42ae28c806b76713a4c296292dc6645d750ccf424fbf55c93f9fab053d89d20f86e0b372e0d9ca99743a6e4"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @challenge={0x10, 0x1, 0x7f}, @supported_rates={0x1, 0x5, [{0x12, 0x1}, {0x48, 0x1}, {0x1b}, {0x2}, {0x36, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x40, 0x4, 0x39, 0xf429}}, @peer_mgmt={0x75, 0x6, {0x0, 0x1, @void, @val=0x13, @void}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "bd6654ec"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "dd30a6d48488e1e14259a8f8786179fbe0df90cbf0ef4fbf542314e0e10103266c"}]]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) [ 190.910185] loop0: detected capacity change from 0 to 7 21:26:37 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 21:26:37 executing program 3: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) 21:26:37 executing program 2: io_uring_setup(0x1168, &(0x7f0000000000)={0x0, 0x3a95, 0x4, 0x3, 0x26f}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:26:37 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x65242) 21:26:37 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:26:37 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 21:26:37 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x200, &(0x7f00000001c0)=0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x65242) 21:26:37 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x64f0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 21:26:37 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) [ 191.244461] loop0: detected capacity change from 0 to 7 21:26:46 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x20000000) 21:26:46 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:26:46 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000140), 0x800) r2 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x65242) 21:26:46 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) 21:26:46 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xbc, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3f}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0xae5}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x10001}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0xfffffbff}, {0x8, 0x0, 0x3cc1}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb, 0x0, "2c939abb8e4332"}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:26:46 executing program 3: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) 21:26:46 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:26:46 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r4 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r4) socket(0x26, 0x5, 0x200) [ 199.830296] loop0: detected capacity change from 0 to 7 21:26:46 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x0, 0x8}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:26:46 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 21:26:46 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x65242) 21:26:46 executing program 3: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) 21:26:46 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00}, 0x9, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:26:46 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:26:46 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:26:46 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = socket(0x11, 0x2, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x6de, &(0x7f0000000100)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x65242) [ 200.260806] loop2: detected capacity change from 0 to 7 [ 200.268706] loop0: detected capacity change from 0 to 7 21:26:46 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00}, 0x0, 0x799, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:26:46 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:26:46 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:26:47 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) socket(0x11, 0x2, 0x4) r0 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x65242) 21:26:47 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:26:47 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 21:26:47 executing program 3: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) [ 200.536528] loop0: detected capacity change from 0 to 7 21:26:56 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) r0 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x65242) 21:26:56 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:26:56 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) 21:26:56 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:26:56 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:26:56 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0xee00}}) 21:26:56 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:26:56 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r5 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) socket(0x26, 0x5, 0x200) [ 209.607684] loop0: detected capacity change from 0 to 7 [ 209.624358] loop2: detected capacity change from 0 to 7 21:26:56 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:26:56 executing program 6: getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x7fff, &(0x7f0000000040)=0x4) r0 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x65242) 21:26:56 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) 21:26:56 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:26:56 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:26:56 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r0) 21:26:56 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:26:56 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) [ 209.838172] loop0: detected capacity change from 0 to 7 21:26:56 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x65242) 21:26:56 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:26:56 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) [ 209.953732] loop2: detected capacity change from 0 to 7 21:26:56 executing program 6: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x65242) 21:26:56 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:26:56 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) 21:26:56 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 210.075679] loop0: detected capacity change from 0 to 7 [ 210.191489] loop2: detected capacity change from 0 to 7 21:27:05 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) 21:27:05 executing program 6: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x65242) 21:27:05 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r5 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000ec0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000e80)={&(0x7f0000000b80)={0x2d4, 0x13, 0x2, 0x70bd28, 0x25dfdbfd, {0x1f, 0x3d, 0x7, 0xfe, {0x4e24, 0x4e22, [0x80000000, 0x2, 0x1, 0xf0f0], [0x3, 0xa78c, 0x7ff, 0x3], 0x0, [0x93, 0xff]}, 0x7fff, 0x1ff}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "015039e056cf4f8280353733d002f05c969b57d83a0a8159e1f480c987b105c286d08b5fe2905009739ab4536662c29f2be4436bb2a3d36397e5d8c1523e07406231c9cfa60a98c06eac5d2f5d8a1bc087fdd974fb91d0f9efa0a0d7d91f5807cfc41ce933b799bc354a2515a96d08f8f96a742a1005d785d16c31ce5dc45b07edf0a210d7294b9c6a1e244711234bf6ecb8fd1f95b3c1c74a15a9be54473234ae12a8b3bb6763edbc388fd6f02d516a05732fbd9407ed3aa9956e04b686610ed38312b13074972d15dab51dd923fb1d3cd2d875e066"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "51ad6fe48bdc4396e4b3259492b29823618bea18a6582e56d78673f82751de80c9bd09ff861165b98929b91207a2f8c965591b6e871fb6d50d2ac49852646eafd5e06a"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "f435237c7fad075ee574b4788c8486a391750d190bbd9b429398580b7fc9f3907978f65f94a40ddb2610e3"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "8d343e58802d0cf94dd399402dfceb821d40169313e2789b984d7fafaaf6a3b8705f3e59aad2f98a36f7f8099e854c6550bc"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "88dc0bce92ebccf0e25d27606bde2ee8e6abfad6d30104297771701a1a9815cb4760aa3df916497d83426a21b12d5f0e6a91b66df8ca565372dfdcaa19be722776980b841989057972fc12cb3e460bce11fa51aea22607209b159f01d975bfca5fd96936a82ef36c9bd47b0d50519e1433eea80e25e12702d76b7a79477d4219ff5f07987a057ce100309f0915fa5b607c85000630860c4c27ae016653bb"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "ad6ee4e577f040ee817e48710b12d4bc224dccad8f1bda4792cc56f99b6554d214ec14de2081dce39c5059b4fc1234765d3583a6b40d69758b5130fc56e36ef01867066cdcff34975d9a937e5e1e1d0b0e"}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) socket(0x26, 0x5, 0x200) 21:27:05 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:05 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:05 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:05 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:27:05 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 219.013996] loop0: detected capacity change from 0 to 7 [ 219.033112] loop2: detected capacity change from 0 to 7 21:27:05 executing program 6: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x65242) 21:27:14 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:14 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(0x0, r0) 21:27:14 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:14 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:14 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 21:27:14 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000091) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:27:14 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x65242) 21:27:14 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) r5 = open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_START_SCHED_SCAN(r5, &(0x7f0000000b00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000980)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="667a8fced974"}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xd}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x33a2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7f}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x400}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10001}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1e, 0x1, @random="2c36956c54e5b024c7d523fbfdbf3419d4d2dcfd1aadea878b82"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="b7d8b82f2376878c6f1da47241a0c278f478e0e6daba85b8"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xf579}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000890) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) socket(0x26, 0x5, 0x200) [ 227.684161] loop2: detected capacity change from 0 to 7 [ 227.686472] loop0: detected capacity change from 0 to 7 21:27:24 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x65242) 21:27:24 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:24 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:24 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:24 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:24 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:27:24 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), 0xffffffffffffffff) 21:27:24 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) open_tree(r0, &(0x7f0000000900)='./file0\x00', 0x800) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) socket(0x26, 0x5, 0x200) [ 237.521589] loop2: detected capacity change from 0 to 7 [ 237.529881] loop0: detected capacity change from 0 to 7 21:27:24 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x65242) 21:27:24 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:27:24 executing program 6: syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x65242) 21:27:24 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:24 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), 0xffffffffffffffff) [ 237.843469] loop2: detected capacity change from 0 to 7 21:27:24 executing program 6: syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x65242) 21:27:24 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:24 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x600000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000940), 0xffffffffffffffff) 21:27:24 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) [ 237.921611] loop0: detected capacity change from 0 to 7 21:27:24 executing program 6: syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x65242) 21:27:33 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:33 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000680), 0x0, 0x208000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 21:27:33 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:27:33 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:33 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:33 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:33 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7d7, 0x38}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40014}, 0xd4) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) socket(0x26, 0x5, 0x200) 21:27:33 executing program 3: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) [ 246.532180] loop3: detected capacity change from 0 to 7 [ 246.579484] loop2: detected capacity change from 0 to 7 [ 246.581734] loop0: detected capacity change from 0 to 7 21:27:33 executing program 6: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:33 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) [ 246.780349] loop6: detected capacity change from 0 to 7 21:27:33 executing program 3: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:33 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) [ 246.826791] loop2: detected capacity change from 0 to 7 21:27:33 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000600), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) [ 246.850111] loop3: detected capacity change from 0 to 7 21:27:33 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:33 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:33 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) [ 246.994321] loop0: detected capacity change from 0 to 7 21:27:33 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:33 executing program 6: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) [ 247.039996] loop2: detected capacity change from 0 to 7 [ 247.054296] loop6: detected capacity change from 0 to 7 21:27:33 executing program 3: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:33 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x402, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:33 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:33 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) [ 247.240530] loop3: detected capacity change from 0 to 7 21:27:42 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:42 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:42 executing program 6: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:42 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:27:42 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) socket(0x26, 0x5, 0x200) 21:27:42 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:42 executing program 3: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 21:27:42 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c854}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) [ 255.687347] set_capacity_and_notify: 1 callbacks suppressed [ 255.687373] loop0: detected capacity change from 0 to 7 [ 255.717439] loop3: detected capacity change from 0 to 7 [ 255.727970] loop2: detected capacity change from 0 to 7 [ 255.730127] loop6: detected capacity change from 0 to 7 21:27:42 executing program 3: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') 21:27:42 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:42 executing program 6: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 21:27:42 executing program 1: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) [ 255.961939] loop6: detected capacity change from 0 to 7 [ 255.966227] loop3: detected capacity change from 0 to 7 21:27:42 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) [ 256.006001] loop2: detected capacity change from 0 to 7 21:27:42 executing program 6: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 256.054236] loop0: detected capacity change from 0 to 7 [ 256.096886] loop6: detected capacity change from 0 to 7 21:27:42 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:27:42 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) [ 256.155299] loop2: detected capacity change from 0 to 7 21:27:42 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:42 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:27:51 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:51 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:51 executing program 6: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 21:27:51 executing program 3: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') 21:27:51 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:51 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:51 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:27:51 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x20, 0x21, 0x78, {0x78, 0x31, "c0d7343afda48cf182edf4924eeca7ff84b779814999ed47f2e7114f3360396ec2860af40432b1fa6e265308e95fcadfa744c33c6aaa6750936ee4e7a45ed7061c3789927955272f0302ec613a37ce5e8121bb980533eaad77b9923f4a8fd19fd8188feff42bcbc86a930a15fb44f917d491a6e664bc"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f00000006c0)={0x0, 0x16, 0x24, "76ff68d28ecd96125668069b709f742032a1db4c1651a3c691519a72a5239d0b6aa53dca"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x9}}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) socket(0x26, 0x5, 0x200) [ 264.865972] set_capacity_and_notify: 1 callbacks suppressed [ 264.865998] loop2: detected capacity change from 0 to 7 [ 264.877273] loop6: detected capacity change from 0 to 7 [ 264.883386] loop3: detected capacity change from 0 to 7 [ 264.887173] loop0: detected capacity change from 0 to 7 21:27:51 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:51 executing program 6: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:51 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) [ 265.168543] loop2: detected capacity change from 0 to 7 21:27:51 executing program 3: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) [ 265.218809] loop6: detected capacity change from 0 to 7 21:27:51 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:51 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) [ 265.260788] loop0: detected capacity change from 0 to 7 [ 265.266747] [ 265.267021] ===================================== [ 265.267715] WARNING: bad unlock balance detected! [ 265.268410] 6.19.0-rc5-next-20260116 #1 Not tainted [ 265.269120] ------------------------------------- [ 265.269823] syz-executor.0/5092 is trying to release lock (rcu_read_lock) at: [ 265.270862] [] __wait_on_freeing_inode+0x105/0x350 [ 265.271815] but there are no more locks to release! [ 265.272527] [ 265.272527] other info that might help us debug this: [ 265.273797] 4 locks held by syz-executor.0/5092: [ 265.274999] #0: ffff88800f97a3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 265.281284] #1: ffff8880095ac698 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 265.282740] #2: ffff88800f97e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 265.284034] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 265.285361] [ 265.285361] stack backtrace: [ 265.286003] CPU: 1 UID: 0 PID: 5092 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 265.286030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 265.286042] Call Trace: [ 265.286049] [ 265.286057] dump_stack_lvl+0xca/0x120 [ 265.286100] ? __wait_on_freeing_inode+0x105/0x350 [ 265.286126] print_unlock_imbalance_bug+0x118/0x130 [ 265.286153] ? __wait_on_freeing_inode+0x105/0x350 [ 265.286179] lock_release+0x1ee/0x270 [ 265.286206] __wait_on_freeing_inode+0x10a/0x350 [ 265.286233] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 265.286261] ? __pfx_var_wake_function+0x10/0x10 [ 265.286293] ? lock_is_held_type+0x9e/0x120 [ 265.286314] insert_inode_locked+0x25f/0x890 [ 265.286344] __ext4_new_inode+0x223d/0x4cd0 [ 265.286375] ? __pfx___ext4_new_inode+0x10/0x10 [ 265.286401] ? __pfx_avc_has_perm+0x10/0x10 [ 265.286425] ? __pfx___dquot_initialize+0x10/0x10 [ 265.286463] ext4_mkdir+0x331/0xb30 [ 265.286496] ? __pfx_ext4_mkdir+0x10/0x10 [ 265.286524] ? security_inode_permission+0x72/0xe0 [ 265.286548] vfs_mkdir+0x6d8/0xc00 [ 265.286578] filename_mkdirat+0x118/0x430 [ 265.286602] ? __pfx_filename_mkdirat+0x10/0x10 [ 265.286625] ? strncpy_from_user+0x21b/0x2f0 [ 265.286655] __x64_sys_mkdir+0x6e/0xd0 [ 265.286677] do_syscall_64+0xbf/0x420 [ 265.286701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.286723] RIP: 0033:0x7f090c58fc27 [ 265.286739] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 265.286760] RSP: 002b:00007f0909b05fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 265.286779] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 00007f090c58fc27 [ 265.286794] RDX: 0000000000000003 RSI: 00000000000001ff RDI: 0000000020000140 [ 265.286807] RBP: 00007f0909b06040 R08: 0000000000000000 R09: 0000000000000000 [ 265.286819] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000100 [ 265.286832] R13: 0000000020000140 R14: 00007f0909b06000 R15: 00000000200002c0 [ 265.286852] [ 265.315763] ------------[ cut here ]------------ [ 265.317867] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.0/5092 [ 265.319503] Modules linked in: [ 265.320043] CPU: 1 UID: 0 PID: 5092 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 265.321554] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 265.322809] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 265.323745] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 265.326472] RSP: 0018:ffff8880460279e0 EFLAGS: 00010286 [ 265.327247] RAX: 00000000ffffffff RBX: ffff888045748000 RCX: ffffc9000088e000 [ 265.328347] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff8880457483fc [ 265.329527] RBP: ffff888045748000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 265.330644] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888045748000 [ 265.331755] R13: 0000000000000001 R14: ffffffff85c10cb0 R15: ffff88800961d8e0 [ 265.332869] FS: 00007f0909b06700(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 265.334104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.335012] CR2: 0000555557aecc98 CR3: 000000004594b000 CR4: 0000000000350ef0 [ 265.336123] Call Trace: [ 265.336637] [ 265.337950] __wait_on_freeing_inode+0x10f/0x350 [ 265.339272] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 265.341390] ? __pfx_var_wake_function+0x10/0x10 [ 265.343895] ? lock_is_held_type+0x9e/0x120 [ 265.346070] insert_inode_locked+0x25f/0x890 [ 265.349336] __ext4_new_inode+0x223d/0x4cd0 [ 265.354287] ? __pfx___ext4_new_inode+0x10/0x10 [ 265.356138] ? __pfx_avc_has_perm+0x10/0x10 [ 265.357337] ? __pfx___dquot_initialize+0x10/0x10 [ 265.361786] ext4_mkdir+0x331/0xb30 [ 265.365685] ? __pfx_ext4_mkdir+0x10/0x10 [ 265.366862] ? security_inode_permission+0x72/0xe0 [ 265.370071] vfs_mkdir+0x6d8/0xc00 [ 265.372795] filename_mkdirat+0x118/0x430 [ 265.374819] ? __pfx_filename_mkdirat+0x10/0x10 [ 265.376229] ? strncpy_from_user+0x21b/0x2f0 [ 265.380113] __x64_sys_mkdir+0x6e/0xd0 [ 265.381306] do_syscall_64+0xbf/0x420 [ 265.382932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.383935] RIP: 0033:0x7f090c58fc27 [ 265.384679] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 265.387339] RSP: 002b:00007f0909b05fa8 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 265.388512] RAX: ffffffffffffffda RBX: 0000000020000280 RCX: 00007f090c58fc27 [ 265.389621] RDX: 0000000000000003 RSI: 00000000000001ff RDI: 0000000020000140 [ 265.390751] RBP: 00007f0909b06040 R08: 0000000000000000 R09: 0000000000000000 [ 265.391846] R10: 0000000000000000 R11: 0000000000000213 R12: 0000000020000100 [ 265.392949] R13: 0000000020000140 R14: 00007f0909b06000 R15: 00000000200002c0 [ 265.398338] [ 265.398764] irq event stamp: 837 [ 265.399250] hardirqs last enabled at (837): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 265.400883] hardirqs last disabled at (836): [] _raw_spin_lock_irqsave+0x53/0x60 [ 265.402365] softirqs last enabled at (832): [] kernel_fpu_end+0x59/0x70 [ 265.403834] softirqs last disabled at (830): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 265.405332] ---[ end trace 0000000000000000 ]--- [ 265.480633] loop2: detected capacity change from 0 to 7 [ 265.564376] loop3: detected capacity change from 0 to 7 [ 272.728248] loop6: detected capacity change from 0 to 7 [ 272.733087] loop0: detected capacity change from 0 to 7 [ 272.742680] loop3: detected capacity change from 0 to 7 21:27:59 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000340)) openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x230182, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:59 executing program 7: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x2da8, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x24080091}, 0x20000800) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8045) syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'}) 21:27:59 executing program 5: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000) read$usbmon(r0, &(0x7f0000000040)=""/171, 0xab) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1814}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x80000, 0x1}}, './file0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x44}}, 0x20004040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0xe52b, 0x7fff}}, './file0\x00'}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000001180)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000000f80)={0x1b4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_IE={0x18b, 0x2a, [@supported_rates={0x1, 0x8, [{0x24, 0x1}, {0x4}, {0x1b, 0x1}, {0x3}, {0xb}, {0x2}, {0x18}, {0x1b, 0x1}]}, @ibss={0x6, 0x2, 0x4}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x8, 0x0, @device_a, 0x4, 0x100000, 0x6}}, @challenge={0x10, 0x1, 0xab}, @measure_req={0x26, 0xed, {0x0, 0x2, 0xf7, "4c6b5f483e0772d82561329ad3fb8fedc2435b3c90587ee29ebc7f0733d7aba292b11efd00dbefb88eefa4cd1435e0a42f06caa116297c4774989d79321c67ed89f56b8499efa98bb29cc2b61d42add5d03651b01539fa25f36b8f50bb52c6cfbdcae53e427911376231e5d15ffe6e9ab0e56e20ea683f7037bf150baa3a311c9961e295ae3c3d861540385001bfd48650d162513a590146e1d5f90452a84be42833e11999c379bf39434eea8035a75aa1230d5af4192b1aa7f026793c3258fda44f23eb1021e1499b32bd2f52cf67f9ff8331888fc98e98f86a6fc8a04a12513bdbfdbddff517f32ab0"}}, @fast_bss_trans={0x37, 0x66, {0x0, 0x1, "fcabaa2030b4360a7589bf00baf0bf08", "903139cf086125fa238a627159b787f6406ec6947d5d82679d4d3d5ca729d32c", "60e62d8b1a0893cdef5e5fae18db238184e5e940326808f59143e4eb23f20c19", [{0x3, 0x12, "91036535dce29818998c33c63dd6a32daf4a"}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x400c004}, 0x0) socket(0x26, 0x5, 0x200) 21:27:59 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000000)=""/135, 0x87}, 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_io_uring_setup(0x1054, &(0x7f0000000280)={0x0, 0x21d4, 0x2, 0x3, 0x143}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) socketpair(0x25, 0xa, 0x10000, &(0x7f00000003c0)) 21:27:59 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:59 executing program 0: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000a80)=@nullb, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0xc, &(0x7f0000000b40)='smackfsfloor') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) 21:27:59 executing program 3: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x8, 0x0) 21:27:59 executing program 6: getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xe63, 0x2, &(0x7f0000000280)=[{&(0x7f0000000180)="755f69aca037f5e611aafb1ba18d3dd3931902f02b07cfb075e6c88bb21a88fcc84bdb341fc7d1d06134a67fdc32b2524ae98f71c8cf14bc18de18cb018fb465a68764a499382374b8d338b8b62ea95642df4273bfc70cc6bf597106cf119c06600896d1f75d9835887af8c34966cdeb", 0x70, 0x3}, {&(0x7f0000000200)="e5af4f29b35cdc1cfff18aaca98a4c5b368910eadc48d0d86fbf50b9f4b59b99d9652abf3675364406036d81410df9314d239416f524d92258fc38c5fcb6cb4d9bf88cf574306a6c2e76cf171b5b973822e8efac72db2209f1f0", 0x5a}], 0x26004, &(0x7f00000002c0)={[{@huge_within_size}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x67]}}, {@mode}], [{@euid_eq={'euid', 0x3d, r0}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '(^'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@subj_type={'subj_type', 0x3d, ',}%-'}}, {@permit_directio}, {@smackfsfloor}, {@appraise_type}]}) chmod(&(0x7f00000003c0)='.\x00', 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x100801, 0x88, 0x4}, 0x18) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000680), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0x1f}}, './file0\x00'}) execve(&(0x7f0000000700)='./file0\x00', &(0x7f0000000880)=[&(0x7f0000000740)='subj_type', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type', &(0x7f0000000800)=']$!0%\x00', &(0x7f0000000840)=')\x00'], &(0x7f0000000900)=[&(0x7f00000008c0)='pcr']) openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x180, 0x0, 0x3}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000dc0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000d80)="8503ec4e3369ca65b3b37ce14192e74fce59e48c76d40e09f94c315878a4f974476719b7992cfe86d5dc47517561ff3ba15bd80c8915773c3925b14a", 0x3c, 0x40000020, 0x1}, 0x79da) [ 272.792891] loop2: detected capacity change from 0 to 7 VM DIAGNOSIS: 21:27:52 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88801989f850 RCX=0000000000000001 RDX=1ffff11003313f0c RSI=ffffffff8234490e RDI=ffff88801989f860 RBP=ffff88801989f820 RSP=ffff88801989f768 R8 =0000000000000001 R9 =ffff88801989f7c8 R10=000000000003d20b R11=000000000001f8d9 R12=ffff88801989f850 R13=0000000000000000 R14=ffff888019875280 R15=0000000000092820 RIP=ffffffff8161d946 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555576b87400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555587506708 CR3=000000001dbd0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff000000000000ff00000000000000 XMM02=59534255530032706f6f6c2f6b636f6c XMM03=642f3d485441505645440065676e6168 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=010000ffff010203ffffffff00000007 XMM06=0000000500000002000055a11f2bd7a0 XMM07=00000000000000000000000000000000 XMM08=49006d756e203c2069000a313a56000a XMM09=00000000000000000000000000000000 XMM10=00000020000000000000002000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff8880460274c8 R8 =0000000000000000 R9 =ffffed100169c046 R10=0000000000000020 R11=666666203a302320 R12=0000000000000020 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f0909b06700 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555557aecc98 CR3=000000004594b000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000