Warning: Permanently added '[localhost]:35479' (ECDSA) to the list of known hosts.
2022/10/02 10:13:27 fuzzer started
2022/10/02 10:13:27 dialing manager at localhost:35095
syzkaller login: [   36.741915] cgroup: Unknown subsys name 'net'
[   36.846292] cgroup: Unknown subsys name 'rlimit'
2022/10/02 10:13:43 syscalls: 2215
2022/10/02 10:13:43 code coverage: enabled
2022/10/02 10:13:43 comparison tracing: enabled
2022/10/02 10:13:43 extra coverage: enabled
2022/10/02 10:13:43 setuid sandbox: enabled
2022/10/02 10:13:43 namespace sandbox: enabled
2022/10/02 10:13:43 Android sandbox: enabled
2022/10/02 10:13:43 fault injection: enabled
2022/10/02 10:13:43 leak checking: enabled
2022/10/02 10:13:43 net packet injection: enabled
2022/10/02 10:13:43 net device setup: enabled
2022/10/02 10:13:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/02 10:13:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/02 10:13:43 USB emulation: enabled
2022/10/02 10:13:43 hci packet injection: enabled
2022/10/02 10:13:43 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930                                          )
2022/10/02 10:13:43 802.15.4 emulation: enabled
2022/10/02 10:13:43 fetching corpus: 50, signal 25395/27207 (executing program)
2022/10/02 10:13:43 fetching corpus: 100, signal 32797/36314 (executing program)
2022/10/02 10:13:43 fetching corpus: 150, signal 42233/47282 (executing program)
2022/10/02 10:13:43 fetching corpus: 200, signal 47873/54470 (executing program)
2022/10/02 10:13:43 fetching corpus: 250, signal 54870/62890 (executing program)
2022/10/02 10:13:43 fetching corpus: 300, signal 60217/69614 (executing program)
2022/10/02 10:13:43 fetching corpus: 350, signal 67281/77854 (executing program)
2022/10/02 10:13:44 fetching corpus: 400, signal 71999/83763 (executing program)
2022/10/02 10:13:44 fetching corpus: 450, signal 78033/90888 (executing program)
2022/10/02 10:13:44 fetching corpus: 500, signal 82575/96541 (executing program)
2022/10/02 10:13:44 fetching corpus: 550, signal 84496/99729 (executing program)
2022/10/02 10:13:44 fetching corpus: 600, signal 86829/103222 (executing program)
2022/10/02 10:13:44 fetching corpus: 650, signal 89070/106630 (executing program)
2022/10/02 10:13:44 fetching corpus: 700, signal 92989/111492 (executing program)
2022/10/02 10:13:44 fetching corpus: 750, signal 95340/114910 (executing program)
2022/10/02 10:13:45 fetching corpus: 800, signal 97607/118217 (executing program)
2022/10/02 10:13:45 fetching corpus: 850, signal 100233/121811 (executing program)
2022/10/02 10:13:45 fetching corpus: 900, signal 102962/125402 (executing program)
2022/10/02 10:13:45 fetching corpus: 950, signal 104357/127819 (executing program)
2022/10/02 10:13:45 fetching corpus: 1000, signal 106124/130535 (executing program)
2022/10/02 10:13:45 fetching corpus: 1050, signal 107930/133297 (executing program)
2022/10/02 10:13:45 fetching corpus: 1100, signal 111069/137121 (executing program)
2022/10/02 10:13:45 fetching corpus: 1150, signal 112632/139629 (executing program)
2022/10/02 10:13:45 fetching corpus: 1200, signal 116313/143773 (executing program)
2022/10/02 10:13:46 fetching corpus: 1250, signal 117932/146214 (executing program)
2022/10/02 10:13:46 fetching corpus: 1300, signal 119714/148798 (executing program)
2022/10/02 10:13:46 fetching corpus: 1350, signal 120920/150946 (executing program)
2022/10/02 10:13:46 fetching corpus: 1400, signal 121814/152822 (executing program)
2022/10/02 10:13:46 fetching corpus: 1450, signal 123101/154957 (executing program)
2022/10/02 10:13:46 fetching corpus: 1500, signal 125399/157854 (executing program)
2022/10/02 10:13:46 fetching corpus: 1550, signal 127615/160626 (executing program)
2022/10/02 10:13:46 fetching corpus: 1600, signal 130577/164008 (executing program)
2022/10/02 10:13:47 fetching corpus: 1650, signal 131915/166069 (executing program)
2022/10/02 10:13:47 fetching corpus: 1700, signal 133125/167941 (executing program)
2022/10/02 10:13:47 fetching corpus: 1750, signal 135449/170687 (executing program)
2022/10/02 10:13:47 fetching corpus: 1800, signal 135943/172085 (executing program)
2022/10/02 10:13:47 fetching corpus: 1850, signal 137514/174239 (executing program)
2022/10/02 10:13:47 fetching corpus: 1900, signal 138222/175766 (executing program)
2022/10/02 10:13:47 fetching corpus: 1950, signal 139366/177598 (executing program)
2022/10/02 10:13:47 fetching corpus: 2000, signal 140388/179393 (executing program)
2022/10/02 10:13:47 fetching corpus: 2050, signal 141555/181269 (executing program)
2022/10/02 10:13:48 fetching corpus: 2100, signal 142586/182941 (executing program)
2022/10/02 10:13:48 fetching corpus: 2150, signal 143392/184459 (executing program)
2022/10/02 10:13:48 fetching corpus: 2200, signal 144672/186323 (executing program)
2022/10/02 10:13:48 fetching corpus: 2250, signal 145988/188202 (executing program)
2022/10/02 10:13:48 fetching corpus: 2300, signal 147191/189927 (executing program)
2022/10/02 10:13:48 fetching corpus: 2350, signal 148528/191733 (executing program)
2022/10/02 10:13:48 fetching corpus: 2400, signal 149920/193585 (executing program)
2022/10/02 10:13:48 fetching corpus: 2450, signal 151400/195439 (executing program)
2022/10/02 10:13:49 fetching corpus: 2500, signal 152895/197272 (executing program)
2022/10/02 10:13:49 fetching corpus: 2550, signal 153589/198572 (executing program)
2022/10/02 10:13:49 fetching corpus: 2600, signal 155013/200361 (executing program)
2022/10/02 10:13:49 fetching corpus: 2650, signal 156400/202025 (executing program)
2022/10/02 10:13:49 fetching corpus: 2700, signal 157668/203664 (executing program)
2022/10/02 10:13:49 fetching corpus: 2750, signal 159311/205458 (executing program)
2022/10/02 10:13:49 fetching corpus: 2800, signal 160440/206977 (executing program)
2022/10/02 10:13:49 fetching corpus: 2850, signal 161029/208151 (executing program)
2022/10/02 10:13:50 fetching corpus: 2900, signal 162077/209577 (executing program)
2022/10/02 10:13:50 fetching corpus: 2950, signal 163720/211277 (executing program)
2022/10/02 10:13:50 fetching corpus: 3000, signal 165077/212884 (executing program)
2022/10/02 10:13:50 fetching corpus: 3050, signal 165785/214063 (executing program)
2022/10/02 10:13:50 fetching corpus: 3100, signal 166552/215288 (executing program)
2022/10/02 10:13:50 fetching corpus: 3150, signal 167711/216716 (executing program)
2022/10/02 10:13:50 fetching corpus: 3200, signal 169002/218211 (executing program)
2022/10/02 10:13:50 fetching corpus: 3250, signal 169887/219453 (executing program)
2022/10/02 10:13:51 fetching corpus: 3300, signal 171114/220826 (executing program)
2022/10/02 10:13:51 fetching corpus: 3350, signal 172074/222081 (executing program)
2022/10/02 10:13:51 fetching corpus: 3400, signal 172621/223091 (executing program)
2022/10/02 10:13:51 fetching corpus: 3450, signal 173638/224307 (executing program)
2022/10/02 10:13:51 fetching corpus: 3500, signal 174475/225452 (executing program)
2022/10/02 10:13:51 fetching corpus: 3550, signal 175322/226586 (executing program)
2022/10/02 10:13:51 fetching corpus: 3600, signal 175876/227577 (executing program)
2022/10/02 10:13:51 fetching corpus: 3650, signal 176954/228836 (executing program)
2022/10/02 10:13:52 fetching corpus: 3700, signal 177628/229861 (executing program)
2022/10/02 10:13:52 fetching corpus: 3750, signal 178825/231104 (executing program)
2022/10/02 10:13:52 fetching corpus: 3800, signal 179507/232131 (executing program)
2022/10/02 10:13:52 fetching corpus: 3850, signal 181155/233529 (executing program)
2022/10/02 10:13:52 fetching corpus: 3900, signal 181736/234482 (executing program)
2022/10/02 10:13:52 fetching corpus: 3950, signal 182426/235448 (executing program)
2022/10/02 10:13:52 fetching corpus: 4000, signal 183075/236389 (executing program)
2022/10/02 10:13:52 fetching corpus: 4050, signal 183616/237267 (executing program)
2022/10/02 10:13:52 fetching corpus: 4100, signal 184197/238126 (executing program)
2022/10/02 10:13:53 fetching corpus: 4150, signal 185172/239246 (executing program)
2022/10/02 10:13:53 fetching corpus: 4200, signal 186236/240261 (executing program)
2022/10/02 10:13:53 fetching corpus: 4250, signal 186932/241147 (executing program)
2022/10/02 10:13:53 fetching corpus: 4300, signal 187437/241967 (executing program)
2022/10/02 10:13:53 fetching corpus: 4350, signal 187958/242774 (executing program)
2022/10/02 10:13:53 fetching corpus: 4400, signal 188583/243610 (executing program)
2022/10/02 10:13:53 fetching corpus: 4450, signal 189421/244591 (executing program)
2022/10/02 10:13:53 fetching corpus: 4500, signal 190026/245396 (executing program)
2022/10/02 10:13:53 fetching corpus: 4550, signal 190642/246253 (executing program)
2022/10/02 10:13:54 fetching corpus: 4600, signal 191325/247061 (executing program)
2022/10/02 10:13:54 fetching corpus: 4650, signal 192124/247970 (executing program)
2022/10/02 10:13:54 fetching corpus: 4700, signal 192621/248715 (executing program)
2022/10/02 10:13:54 fetching corpus: 4750, signal 193160/249467 (executing program)
2022/10/02 10:13:54 fetching corpus: 4800, signal 193910/250280 (executing program)
2022/10/02 10:13:54 fetching corpus: 4850, signal 194333/250996 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/251679 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/252278 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/252827 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/253396 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/254006 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/254550 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/255113 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/255693 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/256258 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/256858 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/257436 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/258046 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/258605 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/259203 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/259772 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/260341 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/260916 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/261519 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/262104 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/262692 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/263255 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/263834 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/264428 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/265034 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/265599 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/266149 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/266731 (executing program)
2022/10/02 10:13:54 fetching corpus: 4876, signal 194680/267281 (executing program)
2022/10/02 10:13:55 fetching corpus: 4876, signal 194680/267882 (executing program)
2022/10/02 10:13:55 fetching corpus: 4876, signal 194680/268459 (executing program)
2022/10/02 10:13:55 fetching corpus: 4876, signal 194680/269063 (executing program)
2022/10/02 10:13:55 fetching corpus: 4876, signal 194680/269637 (executing program)
2022/10/02 10:13:55 fetching corpus: 4876, signal 194680/270227 (executing program)
2022/10/02 10:13:55 fetching corpus: 4876, signal 194680/270811 (executing program)
2022/10/02 10:13:55 fetching corpus: 4876, signal 194680/271417 (executing program)
2022/10/02 10:13:55 fetching corpus: 4876, signal 194680/272009 (executing program)
2022/10/02 10:13:55 fetching corpus: 4876, signal 194680/272577 (executing program)
2022/10/02 10:13:55 fetching corpus: 4876, signal 194680/273071 (executing program)
2022/10/02 10:13:55 fetching corpus: 4876, signal 194680/273071 (executing program)
2022/10/02 10:13:57 starting 8 fuzzer processes
10:13:57 executing program 0:
r0 = semget$private(0x0, 0x1, 0x24)
semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000000)=""/125)
r1 = semget(0x3, 0x4, 0x608)
semctl$IPC_RMID(r1, 0x0, 0x0)
semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000080)=0x7f)
r2 = semget(0x1, 0x0, 0xbd)
clock_gettime(0x0, &(0x7f0000000100)={<r3=>0x0, <r4=>0x0})
semtimedop(r2, &(0x7f00000000c0)=[{0x2, 0x4}, {0x1, 0x8, 0x1000}, {0x3, 0x0, 0x1000}, {0x1, 0x1, 0x800}, {0x0, 0x5, 0x800}], 0x5, &(0x7f0000000140)={r3, r4+10000000})
r5 = semget(0x3, 0x2, 0x40)
semctl$GETNCNT(r5, 0x7, 0xe, &(0x7f0000000180)=""/96)
semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)=""/141)
r6 = semget$private(0x0, 0x1, 0x32c)
semctl$SEM_INFO(r6, 0x0, 0x13, &(0x7f00000002c0)=""/60)
semop(r6, &(0x7f0000000300)=[{0x1, 0x79cd}], 0x1)
semctl$GETVAL(r5, 0x0, 0xc, &(0x7f0000000340)=""/231)
r7 = semget(0x1, 0x1, 0x400)
semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000440)=[0x1ff, 0x9])
semctl$IPC_STAT(r7, 0x0, 0x2, &(0x7f0000000480)=""/218)
clock_gettime(0x0, &(0x7f00000005c0)={<r8=>0x0, <r9=>0x0})
semtimedop(r0, &(0x7f0000000580)=[{0x4, 0x0, 0x1800}, {0x1, 0x4, 0x1000}], 0x2, &(0x7f0000000600)={r8, r9+60000000})

10:13:57 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000000)={0x2, 0x4, {0x100000000, @struct={0x1}, 0x0, 0x7, 0x10000, 0x3, 0x2, 0x7, 0x0, @usage=0x10000, 0x2, 0x4, [0x4, 0x4, 0x76e, 0x8001, 0x2, 0x7fffffff]}, {0x0, @usage=0x7f, 0x0, 0xfffffffffffeffff, 0x6, 0x5, 0x72996cc9, 0x59d, 0xc0, @usage=0x80, 0x90, 0x400, [0x7, 0x80000000, 0xffffffff, 0x80000000, 0x4c, 0x9]}, {0x9, @struct={0xfff, 0x3}, <r1=>0x0, 0x0, 0x0, 0x8, 0x7, 0x5, 0x62, @struct={0x80000000}, 0x0, 0x8, [0x9, 0x6, 0xffff, 0xfffffffffffffffb, 0x80000001, 0x7]}, {0x0, 0x2, 0x5}})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000400)={0x1, 0x7, {0x261, @struct={0x20, 0xda}, 0x0, 0x7, 0x0, 0x7, 0x5, 0x5, 0x80, @struct={0x5, 0xae8}, 0x3ff, 0x7, [0x3ff, 0x9, 0x8, 0x7, 0x4, 0x200]}, {0x5, @usage=0x40, 0x0, 0x7, 0x8, 0x8, 0x600, 0xb7d, 0x4d4, @struct={0xf66a, 0x100}, 0x6, 0x6949, [0x80000, 0x8, 0xffffffffffffc6f5, 0x3, 0xfff, 0xffffffffffff886c]}, {0x10000, @struct={0x8, 0x3}, r1, 0x401, 0x8, 0xfff, 0x101, 0x8, 0x18, @struct={0x3, 0x2}, 0x2, 0x1, [0x8, 0x10001, 0x1000, 0x4, 0x4, 0x3]}, {0x7, 0x5, 0x80000000}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'netdevsim0\x00'})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000840)=0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000880)={'team0\x00'})
pipe2$9p(&(0x7f00000008c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900), 0x2, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000940)={{r3}, "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"})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001940)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index, 0x0, {0x0, r2}, 0x8, 0x3}, 0x5)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000001980)={0x1, 0x3, [@broadcast, @local, @multicast]})
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000001a00)={0x2, 0x10, [0x1, 0x84, 0x1, 0x1000], &(0x7f00000019c0)=[0x0, 0x0]})
symlinkat(&(0x7f0000001a40)='./file0\x00', 0xffffffffffffffff, &(0x7f0000001a80)='./file0\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001ac0)={'veth1_to_hsr\x00'})
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000001b00)={0x18, 0xd, 0x1, {{0x10, 0x4, 0x6}, 0x7ff}}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001b40)={{0x1, 0x1, 0x18, <r4=>r3, {0x3}}, './file0\x00'})
sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x10, 0x3f8, 0x2, 0x70bd28, 0x25dfdbfb, "", ["", "", ""]}, 0x10}}, 0x4000000)
r5 = syz_open_dev$mouse(&(0x7f0000001c80), 0x6, 0x28800)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0xee00)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000001f80)={0xd3, 0x0, &(0x7f0000001f40)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r5]}, 0x5)

[   66.410750] audit: type=1400 audit(1664705637.473:6): avc:  denied  { execmem } for  pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:13:57 executing program 2:
setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "94881101a5829483", "14c5cce85fe11dbd4af3caa4a271e6ae", "9296e8d6", "5a3473c63325b454"}, 0x28)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x7ff)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000080))
ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000000c0)={0x0, 0x80})
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
close(0xffffffffffffffff)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5a}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x5}}, './file0\x00'})
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}}, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000004c0)={0x10002000})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x400}}, './file0/file0\x00'})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1e8, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0xb4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10000}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1c636d515ae0f96e97e5754f3db9fd0a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e76d09e40966e622"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d7fcc8c14127f880de09b42483e3d051641faf3909c6df3dfd39a29f4d582f91"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8b3887497116deba"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="fd45217ab77dc23e2eb9d65f050422e0"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4b725385fb9b1af15552cdb14ded5271"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f978ca70fa50480f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5114e8df509ae696c448e99b90645245e22a707268f0b3118f5b19bf40142403"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8081da8953667a39de91d43b89cf8654"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="83adbbd357b9b965e45c4edd1d7fe4e27524529d4eb0b59b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="53d714f7571e0f498bfdc7f4163cf32e62fe97967aeb2364c481892f2cf7b52d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x101}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5846eef4e632b67e"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "59d658553dcea456"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2a8b71e6364841c6dbff33a5b532ecae"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e7174873d3044a19c38d613bde72f1ba"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="09ed7ddc4e4965839186432b5c3f675a"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "aa5c217fc123716a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b927f14ec736c9c5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x866c}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d5a58b24598b3f6939caec51eff93a04"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7457d88512324832"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000811}, 0x20000000)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000800), 0x4)
r3 = fsmount(r1, 0x0, 0x2)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2)
sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x78, r4, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x1}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_TSID={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4c8c0)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x158, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf8, 0x3, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xee, 0x2, "33fa13d8b30feb4603abaa9b2cc83d2a074329f2a598436cbc1198a1555fa1f7188063e9d4824a531d3e0145f273067bfc9daa63e92081dfce924b25ba1b821fe52e54cc0a19d4e7c8d5d0f982dd6c80451ea1cb0e6455478416567539e32d5479fb7117ef6659e5873ecd81a0c9922c59bedb221c6bf6f03aa77fdc58c969bbd1e75b16540b686262e1191d7ab89329d130bd8eaf304c9276e55cb30e060acf042a52cfe63c59df245d45cb4916953f6247b7440c93b555146f200103a0ba21c8cd5ac752836293ba86332d1d733f1c8422eb197ef04019b813d9aa03fb2fa1ee25dc4abc0e9afab351"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xfff}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000000)

10:13:57 executing program 3:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3fffc0000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="3d81fe344e108cd93c89404af132892f961b04841c0004735e1420eeaf14ff2286efce4e3697850e4cbf8f305fa637478bf363e1ec5f63240c2ec602aab31175da1fb4db26", 0x45, 0x2}, {&(0x7f0000000100), 0x0, 0x1}, {&(0x7f0000000140)="bb3b5115435e789f1906ee45f4907e9bd3d860122461e7acf40bea2d60d75105f9db3eb7ec6aca75645ec1e01d62f975bc678fb1f7d2c08fe5c54002f7a940c7f4a709fe1eea4ef8eb85100ef1abd75abd7cc7e94e43ce199ae6c7cc194e99a8061815b71742c46f84e62112a18661fee4cac791728a1ae54d99247f265d3dadd5a548092904fd3463678eee9ea57958494a46ec0c3faff7af63f9510edd75dcf2f06cdba2dc01fe76bddbaf2cc0526b613e534de40b1ab2df743fa0959f2b366c2d23dd0eb20a9cb7450daeced86bf403", 0xd1, 0x8001}, {&(0x7f0000000240)="4da03b15c46f23fef9a65d9780d85d834e1ad816cb388930fd29b8b78fd53dab13e7889a9444a502566b16300359ecfbb99e08dd1d141fd2dbcc667624dc18b7c534b052829f46", 0x47, 0xb5}], 0x84, &(0x7f0000000340)={[{@map_acorn}, {@map_normal}, {@check_relaxed}, {@cruft}], [{@uid_gt}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x32, 0x65, 0x8393f3d1df20bc11, 0x34, 0x35, 0x36, 0x34], 0x2d, [0x38, 0x66, 0x63, 0x61], 0x2d, [0x32, 0x65, 0x62, 0x64], 0x2d, [0x61, 0x32, 0x36, 0x215a775845ba5cb3], 0x2d, [0x33, 0x64, 0x30, 0x63, 0x35, 0x62, 0x63, 0x66]}}}, {@obj_user={'obj_user', 0x3d, '$'}}, {@fowner_lt}, {@smackfstransmute={'smackfstransmute', 0x3d, '{-^\xac'}}, {@subj_role={'subj_role', 0x3d, '^^'}}, {@context={'context', 0x3d, 'unconfined_u'}}]})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xe8)
fchownat(r0, &(0x7f0000000440)='./file0\x00', r1, 0xffffffffffffffff, 0x1000)
r2 = open$dir(&(0x7f00000005c0)='./file0\x00', 0x200, 0x140)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x30, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000600)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, {0x4400}}, 0x7fffffff)
utimes(&(0x7f0000000640)='.\x00', &(0x7f0000000680)={{0x77359400}, {0x0, 0xea60}})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, <r4=>r2, {r1, 0xee01}}, './file0\x00'})
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000007c0)={0x0, @remote, @private}, &(0x7f0000000800)=0xc)
utimes(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={{0x0, 0x2710}})
setitimer(0x0, &(0x7f00000008c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000900))
r5 = syz_io_uring_setup(0xb2c, &(0x7f0000000940)={0x0, 0xab2, 0x0, 0x2, 0x3cb, 0x0, r4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f00000009c0), &(0x7f0000000a00))
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000a40), 0x50000, 0x0)
clock_gettime(0x0, &(0x7f0000000ac0)={<r7=>0x0, <r8=>0x0})
utimensat(r6, &(0x7f0000000a80)='./file0/file0\x00', &(0x7f0000000b00)={{r7, r8/1000+60000}, {0x0, 0x2710}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'})
chroot(&(0x7f0000000b80)='./file0\x00')
getitimer(0x1, &(0x7f0000000bc0))
getitimer(0x0, &(0x7f0000000c00))
sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x59}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7f}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c0}, 0x44000)

10:13:57 executing program 4:
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x6c, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x5}, 0x8840)
syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1e8, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf0, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x804}, 0x40401)
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r0, 0x100, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008884}, 0x40)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x600, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4058055)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r0, 0x0, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0, 0xd2)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3f}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xff}, @NFACCT_PKTS={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc044}, 0x8000)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000004780), 0x400000, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000004880)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004840)={&(0x7f0000004800)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x88c5)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000049c0)={'syztnl2\x00', &(0x7f0000004980)={'syztnl1\x00', <r3=>0x0, 0x700, 0x7, 0x156, 0xf75e1c0, {{0x5, 0x4, 0x3, 0xb, 0x14, 0x64, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @empty}}}})
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000004a80)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004a40)={&(0x7f0000004a00)={0x40, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000004ac0)={{0x1, 0x1, 0x18, <r4=>r1, {0x3}}, './file0\x00'})
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000004bc0)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004b80)={&(0x7f0000004b40)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffe0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x140)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004c40), r2)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000004e80)={&(0x7f0000004c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004e40)={&(0x7f0000004c80)={0x1ac, r5, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1607}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf2a2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe6e9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4004880}, 0x20000004)
r6 = open(&(0x7f0000004ec0)='./file0\x00', 0xac080, 0x18)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000004fc0)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000004f80)={&(0x7f0000004f40)={0x2c, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x7ffffffffffffffd, 0xf98d}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x6}}]}, 0x2c}}, 0x4040)

10:13:57 executing program 5:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10)
mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/51)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000, 0xffffffffffffffff)
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x1)
mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x810, r0, 0x20)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x64)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x63})
r1 = signalfd4(r0, &(0x7f0000000100)={[0x75c04aea]}, 0x8, 0x100000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x80010, r1, 0x0)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x3000)=nil)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
r2 = pkey_alloc(0x0, 0xb7761957b403a282)
pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, r2)

10:13:57 executing program 6:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000000)=0x2)
ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000040)={{0x2, 0x1, 0xfffffffa, 0x1, 0xffffffe0, 0x2}, 0x3d9, [0x1, 0x200, 0x155, 0x1, 0x7, 0x0, 0x38, 0x8, 0x4, 0x800, 0x1, 0xfffffff7, 0x1f, 0x4, 0xfff, 0x971, 0x5, 0x1, 0x20, 0x3, 0xd27, 0x8, 0xffffff80, 0x4, 0x1, 0x7, 0x8, 0xf3, 0x37f, 0x8, 0x9, 0x0, 0x1, 0x101, 0x6, 0xffffffff, 0x1, 0xfde, 0xf617, 0xffff0811, 0x101, 0x1, 0x4, 0x4, 0x3, 0x7fffffff, 0xff, 0x3, 0x9, 0x9, 0x1, 0xfd91, 0x100, 0x1, 0x7, 0xfffffc13, 0x400, 0x6, 0x2, 0x8001, 0x1000, 0x2, 0xfffffff9, 0x800, 0x100, 0x80000000, 0x3f, 0x9, 0x10001, 0x3, 0xde7, 0x3, 0x3, 0x0, 0x10001, 0x8, 0x81, 0x5, 0x4, 0x4, 0x8, 0xa51, 0x7fff, 0xff, 0x5, 0x5, 0xfb, 0x1, 0x8, 0x8001, 0xea2, 0x0, 0xdfc6, 0x3bb, 0x5, 0x6, 0x5, 0x2, 0xfffffffb, 0x9, 0x4, 0xaf5, 0x8001, 0xa0ab, 0xc174, 0xfffffff8, 0x6, 0x7, 0x8000, 0x81, 0x2, 0x3, 0x62, 0x7, 0xfffffffb, 0x5, 0x6e38, 0x6, 0xc0a, 0xca3d, 0x8, 0x1, 0xffff, 0xc4, 0x9, 0x34, 0x4, 0x3f, 0xff6, 0x4, 0x2, 0x1, 0x4, 0x1, 0x6, 0x7, 0x800, 0x10000, 0x1, 0x1, 0x7, 0x81, 0x9, 0x4000000, 0x7, 0x3, 0x9, 0x91, 0x3e5, 0x63, 0xffff, 0x1f, 0x6236, 0xffff, 0x8, 0x9a, 0xfffffff9, 0x6, 0x2, 0xfff, 0x1, 0x3, 0x4, 0x2, 0x0, 0x9, 0x1, 0x5, 0x4, 0x80, 0x3f, 0x4, 0x9938, 0x58, 0x10001, 0x7, 0x8293, 0x1, 0x1, 0x5, 0x3, 0x0, 0x3f, 0x1, 0x5, 0x401, 0x7, 0x0, 0x8f, 0x1, 0x1400000, 0xc4e, 0x1c, 0xc23, 0x7, 0xff, 0xfffffffb, 0x30b9dab4, 0x101, 0xfff, 0x2, 0x3, 0x0, 0x60f4ee62, 0x1, 0xfffffff9, 0x80000001, 0x1, 0x1, 0x4, 0xffff1d2c, 0x6d, 0x800, 0x140a, 0x6, 0x80, 0x8000, 0xffe00, 0x7fffffff, 0x8, 0x79a271be, 0xffffcd16, 0xad4, 0x5, 0x3, 0xfff, 0x5, 0xe8f, 0x0, 0x4, 0x42, 0x0, 0x2, 0x800, 0x9, 0xfff, 0x5, 0x40, 0x100, 0x0, 0x3ff, 0x802, 0x7fff, 0x101, 0x8, 0x100, 0xff, 0x80, 0x8001, 0xfffffffc, 0x100, 0x9, 0x0, 0xc68ecfec, 0x1, 0x3, 0x72a, 0x6, 0x3ff, 0x3, 0xffffffff, 0x2b, 0x80000001, 0xc8c5, 0x1, 0x5, 0x7, 0x1, 0x1f, 0xff, 0x7, 0x9, 0x4, 0x1, 0x0, 0x9, 0x10001, 0x6, 0x3, 0x10000, 0xe9a, 0x1f, 0x0, 0x1ff, 0xc99c, 0x0, 0x4c7, 0xab, 0x5dcf, 0x400, 0xfffff000, 0x7fffffff, 0x7, 0x7ff, 0x8, 0x4, 0x862, 0x4, 0xfff, 0x8000, 0x5, 0x4, 0xffffffff, 0x4d, 0x7ff, 0x8, 0x2, 0x4, 0x9, 0x8, 0x7, 0x8, 0x3, 0x5, 0x6, 0x4, 0x1000, 0x7fff, 0x5, 0x4, 0x3f, 0x8001, 0x7, 0x81e6, 0x1, 0x9, 0x10001, 0x72, 0x7fffffff, 0x3f, 0x7ff, 0x52e2fd17, 0x8001, 0x200, 0xe01, 0x28f00, 0xffffffff, 0x9, 0x2, 0x0, 0x9, 0x1, 0x7, 0x80000000, 0xffff, 0xcfc, 0x4, 0x7, 0x9, 0x3, 0x9, 0x10001, 0xd5, 0x9, 0x200, 0xffffff01, 0x1, 0x8, 0x100, 0x40000, 0x0, 0x10000, 0x1000, 0x8, 0x6, 0x6, 0x1, 0x82, 0x200, 0xffff, 0x100, 0x0, 0x1, 0x7, 0x20, 0x200, 0x0, 0x3f, 0x7fffffff, 0x9, 0x0, 0x10001, 0x7, 0x400, 0x7fffffff, 0x40, 0x7f, 0x8, 0x7ff, 0x8fac, 0x826, 0x5, 0x5c3, 0x5, 0x1ff, 0x1, 0x5, 0x3, 0x0, 0x1, 0x8, 0xfffffffb, 0xfff, 0x40, 0xeb0, 0x6, 0x8f7, 0x1, 0xfe00000, 0x9, 0x1, 0xfffffffe, 0x7, 0x3, 0xa5, 0xfc5, 0x6506, 0x4, 0x8000, 0x0, 0x0, 0x0, 0xffff, 0x7, 0x6, 0x3, 0x9, 0x4, 0xb7, 0x6, 0x0, 0xeb, 0xfffffff9, 0x7ff, 0x2, 0x9, 0xa652, 0x6, 0x6, 0x3, 0x2, 0xf0, 0x0, 0x3dc14f18, 0x1000, 0x4, 0x0, 0x7, 0x401, 0x2, 0x4, 0x0, 0x20, 0x835, 0x6, 0x3, 0x1d72, 0xfffffffb, 0xffff, 0xb86, 0x1f, 0x81, 0x100, 0x0, 0x80000000, 0xc155, 0x2, 0x5, 0x10000, 0x8, 0x7, 0x1, 0x20, 0x0, 0x3, 0x80, 0x7, 0x6, 0x7, 0x80000000, 0x8, 0x7b1, 0x5, 0x6, 0x2, 0xe2, 0x101, 0x1, 0x7, 0x7, 0xa45, 0x1, 0x1d75992c, 0x1, 0x0, 0xae, 0x40, 0x7fff, 0x9, 0x3, 0x9, 0x9, 0xc793, 0xffff, 0x8000, 0xffffff81, 0x1, 0x8000, 0x98, 0x1000, 0x6, 0x314b, 0x3ff, 0x8, 0x5, 0x20, 0x3, 0x2, 0x6bb, 0x6, 0x5, 0x3ff, 0x200, 0x81, 0x1000, 0x401, 0xc0, 0xffffffff, 0xa53e, 0x5, 0x1b12, 0x2, 0x0, 0x2e000000, 0x7e, 0x7f, 0x1, 0x852, 0xffff42d8, 0x0, 0x7, 0x3, 0x4, 0xb0, 0x7ff, 0x8, 0x10000, 0x3ff, 0x21cb, 0x3b44fb41, 0x2, 0x5, 0x40, 0x7f, 0x2, 0x6, 0x1a69, 0x3ff, 0x7, 0x7f06, 0xffff639c, 0x4, 0x2, 0x4, 0xffff, 0x4, 0x4, 0xffffffff, 0x8, 0x7412, 0x7, 0x5, 0x3f, 0x8000, 0x2, 0x9, 0xa1, 0x9, 0x1f, 0x100, 0xfff, 0x8, 0x22d, 0xb308, 0x0, 0x8684, 0x3, 0x4, 0x800, 0x8d, 0x8, 0xffff, 0x6, 0xa2, 0xcb, 0x9, 0x8000, 0x2, 0x71b23f7c, 0x2, 0x6, 0x100, 0x5, 0x40, 0x6, 0x8, 0x81, 0x7, 0xff, 0x1000, 0x81, 0x3, 0x5, 0x7ff, 0x8400329, 0x0, 0x0, 0x1801dfbe, 0x2, 0x5, 0x80000000, 0x401, 0x4, 0x1, 0x9a9, 0x8, 0x3, 0x9, 0xfffffffa, 0x9, 0x3, 0x9447, 0xfffffff9, 0xab, 0x400, 0x10000, 0xfffffffb, 0x7016, 0x5, 0xfffffff9, 0x2, 0x1, 0x7, 0x9, 0xdb, 0x80, 0x0, 0x5, 0x5, 0x101, 0x6, 0x1, 0x9, 0x200, 0x800, 0x9, 0x7fffffff, 0x80000000, 0x200, 0x4, 0x401, 0xfff, 0x7, 0x4, 0x8, 0x8000, 0x200, 0x3ff, 0x0, 0x0, 0x9, 0x8001, 0x3, 0x4, 0x3b47, 0x8, 0x6, 0x4, 0x732, 0xffffffff, 0x4, 0xfffffffd, 0x9, 0x9, 0x5, 0x6, 0x100, 0x0, 0x10000, 0x3ff, 0x7fff, 0xfffffdf5, 0x4, 0x9, 0xf5, 0x4, 0xa44, 0x3, 0x20, 0x6, 0x1ff, 0xfff, 0x10001, 0xfffffff8, 0x7, 0x7f, 0x10000, 0x1000, 0x7, 0x7, 0xffff, 0x9, 0x2e, 0x3a, 0x7f, 0x1f, 0x5, 0x0, 0x0, 0x9, 0x80000001, 0x3, 0x9, 0x3, 0x7, 0x0, 0x3ff, 0x1, 0xa653, 0x6, 0x0, 0x11, 0x5, 0x81, 0x200, 0x2, 0x8, 0x6, 0xfffffff7, 0xfffffff8, 0x81, 0x400, 0xffff8e12, 0x9, 0x3, 0x5, 0x0, 0xffffa768, 0x6b, 0x1, 0x4, 0x80, 0x80000001, 0x8000, 0x7, 0x4bf, 0x4570, 0x76, 0xd42a, 0x0, 0x8, 0xebbe, 0x7, 0x5, 0x80, 0x4, 0x8, 0xffff, 0x11, 0x1b29, 0x86a0, 0x2, 0x101, 0x3f, 0x8, 0x6, 0x1f, 0x5, 0x101, 0x4, 0x80000001, 0x4, 0xfffffbef, 0xca, 0x6, 0x8, 0xb2, 0x71, 0x3, 0x1, 0x80000000, 0xffffffff, 0x9, 0x1, 0x2, 0x2, 0x6, 0x5, 0x2, 0x0, 0x10001, 0x3f, 0x2, 0x5fa7, 0x7, 0xaebe, 0x8000, 0x1, 0x7ff, 0x829d, 0xffff, 0x8001, 0x4, 0x2c0, 0x7, 0x96b, 0x601, 0x7ff, 0x7, 0x1ff, 0x101, 0x4, 0x0, 0xfe, 0x3, 0xdeb, 0x7, 0x6, 0x800, 0x9, 0x80000001, 0x5, 0x10001, 0x2, 0x1f, 0x8, 0x7ff, 0x7f, 0xff, 0x9, 0x2, 0x3, 0xffffffff, 0x8000, 0x3, 0x8, 0x6, 0x6, 0xfffffffe, 0x8, 0x1, 0x4, 0x2, 0x5, 0x80, 0x1ff, 0x5, 0xe81, 0x5, 0x6, 0x1, 0x8, 0x400, 0x4, 0x9, 0x7fffffff, 0x6, 0xffffffff, 0x9, 0x7, 0x4, 0x1, 0x6, 0x0, 0x2, 0xffff, 0x2, 0x6, 0xfffffffa, 0xfff, 0x200, 0x53, 0x0, 0x4, 0xa5, 0x7fffffff, 0x4, 0x9, 0x10001, 0x0, 0x400, 0x7f, 0x3, 0x0, 0xef2b, 0x80000001, 0x3f, 0x101, 0x3, 0x1, 0xff, 0x7ff, 0x80000000, 0x5, 0x4dc, 0x1, 0x40, 0x6a, 0x1, 0x8, 0x80, 0x10001, 0xfffffffe, 0x9, 0x4, 0x3, 0x6, 0x4bf9ca8a, 0xfff, 0xb85, 0x6, 0xb25, 0x79b0, 0x40, 0xed49, 0x1f, 0x3, 0x6d92, 0x0, 0x1, 0x4, 0x1000, 0x1d02, 0x7, 0x9, 0x6, 0x6, 0x0, 0x7, 0x80000000, 0x1ff, 0x4, 0xa87, 0x2, 0x9, 0x1, 0x101, 0x9, 0x6, 0xfffeffff, 0x10000, 0x2, 0x7f, 0xfffffff8, 0x7fff, 0x6, 0x9, 0x6, 0xdddf, 0x1, 0x7fff, 0xfffffff8, 0x80000000, 0x7, 0x0, 0xfffffe01, 0x7fffffff, 0x8, 0xdc0, 0x200, 0x40, 0x6, 0x6, 0x0, 0xd1, 0x3, 0x2, 0x4, 0x714e, 0x53, 0x7, 0x0, 0xffff03ef, 0x8000, 0xffff, 0xfffffff9, 0x8001, 0x1, 0xfffffd22, 0x3, 0x6, 0x20, 0x9, 0x9, 0x838, 0x1, 0x2, 0x3, 0xffffffb1, 0xee, 0x9, 0x745, 0x54, 0x7ff, 0x7, 0x40000000, 0x80000001, 0xfffffffb, 0xb8, 0x10000, 0x80000000, 0x7ff, 0x7, 0x10000, 0x7ff, 0x1, 0x20, 0xb2, 0x3, 0x2d, 0x2d7, 0x0, 0x6, 0x3e]})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r2 = syz_mount_image$ext4(&(0x7f0000001080)='ext4\x00', &(0x7f00000010c0)='./file0\x00', 0x4, 0x3, &(0x7f0000001300)=[{&(0x7f0000001100)="85efbc602a7461ba2ef237004157496c23e62e4610ca3dc2d0947b2f9a8fc834c7e36a6ffc70374376674bb8224d8eeefa3fe70515b7b0648b2c4399c0e3b38ea222515b295398537e63b7f6d1e632a1cbf6d66d7f24c25ab555b319c9d8cc4f8cfad1a00029956de0adc825033556463b04a8055869169530227b9d4a136c635c71179f51e23d1f6b44e8801b0fe9763ce1c3ec2adbc3c5f55644510d3e69bd2a549ac074a2c92640186b810cf40172767680b3e9f4c21b5726385bb803d0a11053ee6792e47abd2ca5fcdde857e5", 0xcf, 0x1}, {&(0x7f0000001200)="d70f712875809d25b283a77935b9f8b841391b8d013de7a34ae18237af9ea34f1240e431866aac4013cd87fe5441e7dc3ff78afcc31a3819f08304590fa0e251721d46ce08876fc05dc6854c72e5afd9980f61205427695c15a1f6e9c56ea6e56617d74ccde52c7d378c74ab710dcb72558d02c6ae4fafa3ced2907c1fc65abb964bace0e0e229c783ddcb126d404a1bdd455b90dcd2f0277e10", 0x9a, 0x1}, {&(0x7f00000012c0)="ee9ab691636461f23668b5d0e4391bda8aa0aaace67d9bd21f0d212ba3934d3bc05da8b24b968d887e6befbf03dc89", 0x2f, 0x4}], 0x400, &(0x7f0000001380)={[], [{@fowner_gt={'fowner>', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, '&}#'}}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, ']#}[/'}}]})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000001400)={{0x1, 0x1, 0x18, <r4=>r3, @in_args={0x6}}, './file0\x00'})
write$binfmt_misc(r4, &(0x7f0000001440)={'syz0', "4e53f432fa71cd74e98aca996ffb2f9665"}, 0x15)
r5 = creat(&(0x7f0000001480)='./file0\x00', 0x1)
ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x2)
fcntl$dupfd(r2, 0x406, r3)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000017c0)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000018c0)=0xe8)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001900)={0x0, <r7=>0x0}, &(0x7f0000001940)=0xc)
syz_mount_image$vfat(&(0x7f00000014c0), &(0x7f0000001500)='./file0\x00', 0x8, 0x3, &(0x7f0000001740)=[{&(0x7f0000001540)="668fcdc64dbecde7dc927353c14ddd493bbc76c43ee4e0223a7334a6c4fa587e0b87ddaed9d6bf7761b95c45f38855993d70cba655e66eb4b1f250ec764fbae69cea8065b6", 0x45, 0x40}, {&(0x7f00000015c0)="7d54f62ca0ba23159e8332c82f5474425c3e289fe32761902b4cc5deb84601ce0dfb13c8d5700b3395e1cd4ada14f2e977da0d768becdb699fbc1c7a0ece6727bff54fa2c56f9d72c8ef90645ad133bc79e213c2956715c6685c92a731ab", 0x5e, 0x2}, {&(0x7f0000001640)="38e80f3185f56478cccf4976fa4315108a21aa282cec5a6baac2e997294af4d705e810ae99a82071d4655c2a5a7fa3ccd05b0c750103aa64e1de8f8b769dee59e9305a9b9438ec704acf865c63ef4d3336f1bfcc227f43fb7d0272c71622a68657c211d90601cc1578acd1edbf9badd9bc92466b4fe39839b9f336e00858a4963fce2dfe29d3775b532eb8f7fc7fa387a3f223cc9b32e87ec497e75c8658f177822c6433f40f9803bbf16125d8108c774c9a04f8c84bb5a6fb66e282a75a05e43eb83e621c7444eed72c9e9b468342b670269d96f942bf8143cac2ceb1f6e8002b9787501d57ef991b", 0xe9}], 0x0, &(0x7f0000001980)={[{@numtail}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlate}], [{@euid_eq={'euid', 0x3d, r6}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@measure}, {@measure}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fowner_eq={'fowner', 0x3d, r7}}]})
r8 = fcntl$getown(0xffffffffffffffff, 0x9)
r9 = perf_event_open(&(0x7f0000001a40)={0x5, 0x80, 0xff, 0xf0, 0xfd, 0x14, 0x0, 0xe7e, 0xb, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x80000001}, 0x1a02, 0xffffffffffff8000, 0x5, 0x6, 0x2, 0x40, 0x4, 0x0, 0x81, 0x0, 0x8}, r8, 0xe, r3, 0x1)
r10 = dup3(r4, r9, 0x0)
name_to_handle_at(r10, &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)=@OVL_FILEID_V1={0x1018, 0xf8, {'\x00', {0x0, 0xfb, 0x1015, 0x0, 0x4, "0e6e43e3fc9dca09ca75394fa1d5c8b9", "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"}}}, &(0x7f0000002b40), 0x0)
r11 = signalfd4(r0, &(0x7f0000002b80)={[0x6]}, 0x8, 0x800)
mknodat$null(r11, &(0x7f0000002bc0)='./file0\x00', 0x601, 0x103)

10:13:57 executing program 7:
clock_gettime(0x0, &(0x7f0000001c00)={<r0=>0x0, <r1=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f0000000040)=""/226, 0xe2}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/130, 0x82}], 0x8, &(0x7f00000014c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001580)=""/78, 0x4e}], 0x1, &(0x7f0000001640)=[@rights={{0x1c, 0x1, 0x1, [<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001680)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001700)=""/120, 0x78}], 0x1, &(0x7f00000017c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001900)=""/50, 0x32}, {&(0x7f0000001940)=""/77, 0x4d}, {&(0x7f00000019c0)}], 0x3, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x98}}], 0x4, 0x40, &(0x7f0000001c40)={r0, r1+60000000})
ioctl$SG_GET_LOW_DMA(r9, 0x227a, &(0x7f0000001c80))
r11 = syz_io_uring_setup(0x2c9f, &(0x7f0000001cc0)={0x0, 0x79b0, 0x4, 0x1, 0x1db, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001d40), &(0x7f0000001d80)=<r12=>0x0)
syz_io_uring_submit(0x0, r12, &(0x7f0000001dc0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x4000}, 0x1}, 0x5)
io_uring_enter(r11, 0x3708, 0x3a71, 0x3, &(0x7f0000001e00)={[0x62]}, 0x8)
syz_io_uring_setup(0x7ad3, &(0x7f0000001e40)={0x0, 0xaec4, 0x1, 0x1, 0x206, 0x0, r10}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001ec0), &(0x7f0000001f00))
clock_gettime(0x0, &(0x7f0000001f80)={<r13=>0x0, <r14=>0x0})
futex(&(0x7f0000001f40)=0x2, 0x5, 0x0, &(0x7f0000001fc0)={r13, r14+60000000}, &(0x7f0000002000)=0x1, 0x1)
openat(r4, &(0x7f0000002040)='./file0\x00', 0x10000, 0x8)
getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000002080), &(0x7f00000020c0)=0x8)
mmap$IORING_OFF_SQES(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0xe, 0x40010, r6, 0x10000000)
pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0xffffffffffffffff)
ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000002100)=<r15=>0x0)
fcntl$lock(r2, 0x24, &(0x7f0000002140)={0x1, 0x2, 0x7ff, 0x9, r15})
recvmmsg$unix(r5, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002180)=""/100, 0x64}, {&(0x7f0000002200)=""/177, 0xb1}], 0x2}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f0000002400)=[{&(0x7f0000002380)}, {&(0x7f00000023c0)=""/23, 0x17}], 0x2, &(0x7f0000002440)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r16=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}], 0x2, 0x21, &(0x7f0000002580)={0x0, 0x989680})
fcntl$F_SET_RW_HINT(r16, 0x40c, &(0x7f00000025c0)=0x5)
syz_io_uring_setup(0x21e6, &(0x7f0000002600)={0x0, 0x83aa, 0x1, 0x2, 0x27f}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002680), &(0x7f00000026c0))
r17 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000fef000/0x2000)=nil, 0x2000, 0x5, r17)

[   67.754797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.757951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.760762] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.762501] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.763830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.764952] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.778478] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.779962] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.784517] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.796577] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.797890] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.802608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.804034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   67.805738] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   67.807489] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   67.809372] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   67.811089] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   67.812949] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   67.814281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   67.815448] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   67.816620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   67.817854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   67.822715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   67.822762] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   67.825453] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   67.827669] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.828963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.838369] Bluetooth: hci0: HCI_REQ-0x0c1a
[   67.842202] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   67.842823] Bluetooth: hci2: HCI_REQ-0x0c1a
[   67.843367] Bluetooth: hci1: HCI_REQ-0x0c1a
[   67.867299] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   67.870028] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   67.870061] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   67.871695] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   67.874035] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   67.875525] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   67.876536] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   67.878113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   67.880606] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   67.881902] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   67.882040] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   67.884322] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   67.884587] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   67.886658] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   67.888375] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   67.889652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   67.896528] Bluetooth: hci4: HCI_REQ-0x0c1a
[   67.896597] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   67.900933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   67.903107] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   67.907883] Bluetooth: hci3: HCI_REQ-0x0c1a
[   67.911698] Bluetooth: hci5: HCI_REQ-0x0c1a
[   67.917437] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   67.949066] Bluetooth: hci6: HCI_REQ-0x0c1a
[   67.960787] Bluetooth: hci7: HCI_REQ-0x0c1a
[   69.878783] Bluetooth: hci2: command 0x0409 tx timeout
[   69.879978] Bluetooth: hci1: command 0x0409 tx timeout
[   69.881512] Bluetooth: hci0: command 0x0409 tx timeout
[   69.942311] Bluetooth: hci3: command 0x0409 tx timeout
[   69.943833] Bluetooth: hci4: command 0x0409 tx timeout
[   70.006361] Bluetooth: hci7: command 0x0409 tx timeout
[   70.007497] Bluetooth: hci5: command 0x0409 tx timeout
[   70.008496] Bluetooth: hci6: command 0x0409 tx timeout
[   71.926289] Bluetooth: hci0: command 0x041b tx timeout
[   71.926767] Bluetooth: hci1: command 0x041b tx timeout
[   71.927228] Bluetooth: hci2: command 0x041b tx timeout
[   71.990279] Bluetooth: hci4: command 0x041b tx timeout
[   71.990752] Bluetooth: hci3: command 0x041b tx timeout
[   72.054250] Bluetooth: hci6: command 0x041b tx timeout
[   72.054702] Bluetooth: hci5: command 0x041b tx timeout
[   72.055104] Bluetooth: hci7: command 0x041b tx timeout
[   73.974208] Bluetooth: hci2: command 0x040f tx timeout
[   73.974698] Bluetooth: hci1: command 0x040f tx timeout
[   73.975085] Bluetooth: hci0: command 0x040f tx timeout
[   74.038247] Bluetooth: hci3: command 0x040f tx timeout
[   74.038720] Bluetooth: hci4: command 0x040f tx timeout
[   74.102286] Bluetooth: hci7: command 0x040f tx timeout
[   74.102766] Bluetooth: hci5: command 0x040f tx timeout
[   74.103189] Bluetooth: hci6: command 0x040f tx timeout
[   76.022217] Bluetooth: hci0: command 0x0419 tx timeout
[   76.022673] Bluetooth: hci1: command 0x0419 tx timeout
[   76.023060] Bluetooth: hci2: command 0x0419 tx timeout
[   76.086194] Bluetooth: hci4: command 0x0419 tx timeout
[   76.086636] Bluetooth: hci3: command 0x0419 tx timeout
[   76.150220] Bluetooth: hci6: command 0x0419 tx timeout
[   76.150652] Bluetooth: hci5: command 0x0419 tx timeout
[   76.151057] Bluetooth: hci7: command 0x0419 tx timeout
[  120.516608] loop3: detected capacity change from 0 to 264192
[  120.526753] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
10:14:51 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000)

10:14:51 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000)

10:14:51 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000)

10:14:52 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000)

10:14:52 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x17)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9)

10:14:52 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9)

10:14:52 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9)

10:14:52 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9)

[  122.952996] ext4: Unknown parameter 'fowner>00000000000000060929'
[  122.967230] audit: type=1400 audit(1664705694.029:7): avc:  denied  { open } for  pid=3971 comm="syz-executor.6" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
10:15:14 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x22d9, 0x3090c0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000180)={0x0, 0x0, 0x11, &(0x7f0000000080)="d4eba84a3f13edfbf79f0b9601a47366eb"})
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0xa9e6, 0x3, 0x7, 0x6})

10:15:14 executing program 0:
syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x32261, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
r2 = getgid()
openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x983, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000007129e850018000000", @ANYRES32, @ANYBLOB="41620ca9d7d427d7427d443c78a580392b01e84e5650f345d6c42fd9c0b300921240f637ba6200000000000000000000ac211d6500"/66, @ANYRESDEC=r2, @ANYBLOB="fdba8d04406b831a03d4562b7774b470497aed3dc914d75d4ddfa3f89de8f0c8a62bbbe98d7c853bbca000da9fe460b21504e5e78f989bd1954035f2242f3acaae620ad736c07a055c31c308"])
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000480)="9d34935b1a8851da9878f9c0b14cf6281b4a31757ac38d518b24f3ad271feb3a47c5db3c6001a6094314c697dde179b826c43bfcc1c81c24b1b61599a663d09d6541d641b2c66dc6da624ac64fa81b9c5515d77cc209d7d65867b04445d2038fed60e0d3a63ede2f7f5f9057492202b0f32cfea5fb231c65aaee19b99b03d0d4be7a3fd2aeb474ecd346d0e151cca3e2dfda435d70c9bad17d7478ee12e8acf032f655d0f22e91ba476aea7afee484223ae16e792bb22640d0a8db1491d3d1cdeca6a606601fda407a59cbcdfdd748bf7a72a97eeb4eb230f03db946f927f913469cdf932afd4f06f8fd46575a0b05501da49698f480ba76bf4f4bfa603ff33a")
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000440)={'vlan0\x00'})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)="f61f582e71028422b74fdfe1c853012be0437ae5292e565df44f7826d1e8ae8b3742c1ebf3e4aa3ec4490f956910d89780652d1b2528b94ba5c4ec50cb9d589cc77685e64abe121bc4dcd00fe35ab67bc47de8248b8ded9e5252d1288dd6e956ef60797a8a86145922be8fcf48c048ea98c6aab26cf41478197bc9e73af159a5ce1e3a", 0x83}, 0x68)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x1010, 0xffffffffffffffff, 0x10000000)
perf_event_open(&(0x7f0000001840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001800), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000000)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108)
getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f00000003c0)=""/105, &(0x7f00000004c0)=0x69)
clock_gettime(0x1, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000240)={r4, r5/1000+10000}, 0x10)
write(r1, &(0x7f0000000080)="01", 0x292e9)

10:15:14 executing program 7:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'})
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=<r1=>0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50, 0x4, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380)
ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000340)={'\x00', 0x80, 0x3f, 0x7fffffff, 0x0, 0x2, r1})
r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1, 0xd6c2})
ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="01f200000100000018000000", @ANYRES32=<r4=>0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file8\x00'])
r5 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x9, 0x4, 0x80, 0x1f, 0x0, 0x40, 0x208, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc1, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x40000, 0x2, 0x1, 0x6, 0xfffffffffffffffe, 0x8, 0x7, 0x0, 0x3, 0x0, 0x1f}, r5, 0x5, 0xffffffffffffffff, 0x2)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000180)={'\x00', 0x200, 0x5, 0x10000, 0x7, 0x7fff, r5})
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
syz_open_dev$sg(&(0x7f0000000200), 0x3, 0x0)
syz_open_procfs(0x0, 0x0)

10:15:14 executing program 1:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_io_uring_complete(0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000040)={0x0, 0x88b, 0x0, 0x0, 0x0, "425bb45816f822e6b8208f9a07eeec557d2e8f"})
openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000001140)="11975a43dcd3ad912051513fc9654ddeea5893b8cfbba61a2ce44acba1e61e63a4ccb378062a1a3ffaadec89146928b7395f20536bfc376d6debfabdf501ee", 0x3f}], 0x1)
r2 = socket(0x15, 0x1, 0x40000006)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000140)={0x1})
bind$packet(r2, &(0x7f0000005280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r3 = socket$netlink(0x10, 0x3, 0x13)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01030000000000000000150000000c00018008000300000000002800018014000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="09f9dc8fa58b8e8d344b0fecf974b24329f2db179e0b346e2cbd147dcf14b6f68f84b4d2698b57f46ce6ef3d84ad2bfdfb8d082e7f28b2a5be750e5613e88738e48d250453795f067ae0677eb51ba0a3462f648aa7845a69be46184ded4b2d20000453e89e3f7c92e7b32c7b626578f7f8420c6a984a11007489dd632cabe32a601f310bdd7a2c5fb28778c0d2b3e450d4eddafc876b9a566454000000000100000071d634fe630ccb174dcf2582a5e27ec93e695727f222c38bbcde31b98ea1acc1a0ace9dd73f9621a3a7f86b401bb8bc20c594343f179b91f3c47dfa857fcb1160972a5f8b489a5a563e158299b82add486a8cffdd09c427882af330a5966cefa20189c1f336d94f0cfb134afa6f3d3e86286bd17d1d659dbadce0bde7903d438c48e2db9b097dfe493042360676f71b204bd2cd85c53f82ca25958c8af0000"], 0x48}}, 0x0)

10:15:14 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9)

10:15:14 executing program 5:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10)
mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/51)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000, 0xffffffffffffffff)
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x1)
mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x810, r0, 0x20)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x64)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x63})
r1 = signalfd4(r0, &(0x7f0000000100)={[0x75c04aea]}, 0x8, 0x100000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x80010, r1, 0x0)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x3000)=nil)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
r2 = pkey_alloc(0x0, 0xb7761957b403a282)
pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, r2)

10:15:14 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
mlock(&(0x7f0000ff5000/0x4000)=nil, 0x4000)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
r1 = timerfd_create(0x3, 0x0)
dup(r1)

10:15:14 executing program 6:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
r3 = openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb)
accept$unix(r3, 0x0, &(0x7f0000000180))
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010040000000000000000b0000000c0001800800030000000000"], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x20058080)
sendmmsg(r4, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x6558, r6}, 0x80, 0x0}}], 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
close_range(r0, 0xffffffffffffffff, 0x0)

[  143.453242] audit: type=1400 audit(1664705714.515:8): avc:  denied  { kernel } for  pid=3997 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  143.477267] ------------[ cut here ]------------
[  143.477304] 
[  143.477310] ======================================================
[  143.477316] WARNING: possible circular locking dependency detected
[  143.477324] 6.0.0-rc7-next-20220930 #1 Not tainted
[  143.477336] ------------------------------------------------------
[  143.477342] syz-executor.7/4002 is trying to acquire lock:
[  143.477355] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  143.477425] 
[  143.477425] but task is already holding lock:
[  143.477430] ffff8880404c8820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  143.477479] 
[  143.477479] which lock already depends on the new lock.
[  143.477479] 
[  143.477485] 
[  143.477485] the existing dependency chain (in reverse order) is:
[  143.477490] 
[  143.477490] -> #3 (&ctx->lock){....}-{2:2}:
[  143.477517]        _raw_spin_lock+0x2a/0x40
[  143.477538]        __perf_event_task_sched_out+0x53b/0x18d0
[  143.477560]        __schedule+0xedd/0x2470
[  143.477587]        schedule+0xda/0x1b0
[  143.477613]        exit_to_user_mode_prepare+0x114/0x1a0
[  143.477635]        syscall_exit_to_user_mode+0x19/0x40
[  143.477660]        do_syscall_64+0x48/0x90
[  143.477692]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  143.477717] 
[  143.477717] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  143.477744]        _raw_spin_lock_nested+0x30/0x40
[  143.477764]        raw_spin_rq_lock_nested+0x1e/0x30
[  143.477789]        task_fork_fair+0x63/0x4d0
[  143.477821]        sched_cgroup_fork+0x3d0/0x540
[  143.477848]        copy_process+0x4183/0x6e20
[  143.477868]        kernel_clone+0xe7/0x890
[  143.477887]        user_mode_thread+0xad/0xf0
[  143.477907]        rest_init+0x24/0x250
[  143.477930]        arch_call_rest_init+0xf/0x14
[  143.477962]        start_kernel+0x4c6/0x4eb
[  143.477992]        secondary_startup_64_no_verify+0xe0/0xeb
[  143.478018] 
[  143.478018] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  143.478044]        _raw_spin_lock_irqsave+0x39/0x60
[  143.478066]        try_to_wake_up+0xab/0x1930
[  143.478091]        up+0x75/0xb0
[  143.478119]        __up_console_sem+0x6e/0x80
[  143.478149]        console_unlock+0x46a/0x590
[  143.478179]        vprintk_emit+0x1bd/0x560
[  143.478211]        vprintk+0x84/0xa0
[  143.478242]        _printk+0xba/0xf1
[  143.478263]        regdb_fw_cb.cold+0x6c/0xa7
[  143.478295]        request_firmware_work_func+0x12e/0x240
[  143.478332]        process_one_work+0xa17/0x16a0
[  143.478365]        worker_thread+0x637/0x1260
[  143.478397]        kthread+0x2ed/0x3a0
[  143.478424]        ret_from_fork+0x22/0x30
[  143.478448] 
[  143.478448] -> #0 ((console_sem).lock){....}-{2:2}:
[  143.478474]        __lock_acquire+0x2a02/0x5e70
[  143.478507]        lock_acquire+0x1a2/0x530
[  143.478563]        _raw_spin_lock_irqsave+0x39/0x60
[  143.478584]        down_trylock+0xe/0x70
[  143.478614]        __down_trylock_console_sem+0x3b/0xd0
[  143.478645]        vprintk_emit+0x16b/0x560
[  143.478677]        vprintk+0x84/0xa0
[  143.478708]        _printk+0xba/0xf1
[  143.478728]        report_bug.cold+0x72/0xab
[  143.478759]        handle_bug+0x3c/0x70
[  143.478792]        exc_invalid_op+0x14/0x50
[  143.478825]        asm_exc_invalid_op+0x16/0x20
[  143.478848]        group_sched_out.part.0+0x2c7/0x460
[  143.478882]        ctx_sched_out+0x8f1/0xc10
[  143.478915]        __perf_event_task_sched_out+0x6d0/0x18d0
[  143.478936]        __schedule+0xedd/0x2470
[  143.478963]        schedule+0xda/0x1b0
[  143.478989]        exit_to_user_mode_prepare+0x114/0x1a0
[  143.479010]        syscall_exit_to_user_mode+0x19/0x40
[  143.479035]        do_syscall_64+0x48/0x90
[  143.479067]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  143.479092] 
[  143.479092] other info that might help us debug this:
[  143.479092] 
[  143.479097] Chain exists of:
[  143.479097]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  143.479097] 
[  143.479126]  Possible unsafe locking scenario:
[  143.479126] 
[  143.479131]        CPU0                    CPU1
[  143.479135]        ----                    ----
[  143.479139]   lock(&ctx->lock);
[  143.479150]                                lock(&rq->__lock);
[  143.479162]                                lock(&ctx->lock);
[  143.479174]   lock((console_sem).lock);
[  143.479185] 
[  143.479185]  *** DEADLOCK ***
[  143.479185] 
[  143.479189] 2 locks held by syz-executor.7/4002:
[  143.479202]  #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  143.479259]  #1: ffff8880404c8820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  143.479311] 
[  143.479311] stack backtrace:
[  143.479316] CPU: 0 PID: 4002 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1
[  143.479340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  143.479355] Call Trace:
[  143.479361]  <TASK>
[  143.479369]  dump_stack_lvl+0x8b/0xb3
[  143.479405]  check_noncircular+0x263/0x2e0
[  143.479437]  ? format_decode+0x26c/0xb50
[  143.479468]  ? print_circular_bug+0x450/0x450
[  143.479501]  ? simple_strtoul+0x30/0x30
[  143.479532]  ? perf_swevent_event+0x6c/0x550
[  143.479565]  ? format_decode+0x26c/0xb50
[  143.479599]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  143.479634]  __lock_acquire+0x2a02/0x5e70
[  143.479676]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  143.479720]  lock_acquire+0x1a2/0x530
[  143.479753]  ? down_trylock+0xe/0x70
[  143.479787]  ? lock_release+0x750/0x750
[  143.479827]  ? vprintk+0x84/0xa0
[  143.479862]  _raw_spin_lock_irqsave+0x39/0x60
[  143.479885]  ? down_trylock+0xe/0x70
[  143.479916]  down_trylock+0xe/0x70
[  143.479947]  ? vprintk+0x84/0xa0
[  143.479980]  __down_trylock_console_sem+0x3b/0xd0
[  143.480015]  vprintk_emit+0x16b/0x560
[  143.480052]  vprintk+0x84/0xa0
[  143.480086]  _printk+0xba/0xf1
[  143.480108]  ? record_print_text.cold+0x16/0x16
[  143.480140]  ? report_bug.cold+0x66/0xab
[  143.480175]  ? group_sched_out.part.0+0x2c7/0x460
[  143.480211]  report_bug.cold+0x72/0xab
[  143.480248]  handle_bug+0x3c/0x70
[  143.480282]  exc_invalid_op+0x14/0x50
[  143.480318]  asm_exc_invalid_op+0x16/0x20
[  143.480343] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  143.480383] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  143.480405] RSP: 0018:ffff888040d97c48 EFLAGS: 00010006
[  143.480422] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  143.480437] RDX: ffff88800df10000 RSI: ffffffff81565dc7 RDI: 0000000000000005
[  143.480452] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
[  143.480466] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff8880404c8800
[  143.480481] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002
[  143.480502]  ? group_sched_out.part.0+0x2c7/0x460
[  143.480542]  ? group_sched_out.part.0+0x2c7/0x460
[  143.480581]  ctx_sched_out+0x8f1/0xc10
[  143.480620]  __perf_event_task_sched_out+0x6d0/0x18d0
[  143.480648]  ? lock_is_held_type+0xd7/0x130
[  143.480675]  ? __perf_cgroup_move+0x160/0x160
[  143.480696]  ? set_next_entity+0x304/0x550
[  143.480731]  ? update_curr+0x267/0x740
[  143.480767]  ? lock_is_held_type+0xd7/0x130
[  143.480795]  __schedule+0xedd/0x2470
[  143.480829]  ? io_schedule_timeout+0x150/0x150
[  143.480861]  ? trace_rcu_dyntick+0x1a7/0x250
[  143.480898]  schedule+0xda/0x1b0
[  143.480928]  exit_to_user_mode_prepare+0x114/0x1a0
[  143.480953]  syscall_exit_to_user_mode+0x19/0x40
[  143.480979]  do_syscall_64+0x48/0x90
[  143.481014]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  143.481041] RIP: 0033:0x7ff25f922b19
[  143.481057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  143.481078] RSP: 002b:00007ff25ce98218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  143.481099] RAX: 0000000000000001 RBX: 00007ff25fa35f68 RCX: 00007ff25f922b19
[  143.481113] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff25fa35f6c
[  143.481128] RBP: 00007ff25fa35f60 R08: 000000000000000e R09: 0000000000000000
[  143.481142] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff25fa35f6c
[  143.481156] R13: 00007ffd68e0596f R14: 00007ff25ce98300 R15: 0000000000022000
[  143.481181]  </TASK>
[  143.606458] WARNING: CPU: 0 PID: 4002 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  143.607855] Modules linked in:
[  143.608348] CPU: 0 PID: 4002 Comm: syz-executor.7 Not tainted 6.0.0-rc7-next-20220930 #1
[  143.609532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  143.611178] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  143.612003] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  143.614638] RSP: 0018:ffff888040d97c48 EFLAGS: 00010006
[  143.615425] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  143.616477] RDX: ffff88800df10000 RSI: ffffffff81565dc7 RDI: 0000000000000005
[  143.617519] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001
[  143.618582] R10: 0000000000000000 R11: ffffffff865b401b R12: ffff8880404c8800
[  143.619629] R13: ffff88806ce3d2c0 R14: ffffffff8547d000 R15: 0000000000000002
[  143.620669] FS:  00007ff25ce98700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  143.621845] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.622707] CR2: 00007f9b1855f545 CR3: 000000003fb04000 CR4: 0000000000350ef0
[  143.623758] Call Trace:
[  143.624155]  <TASK>
[  143.624506]  ctx_sched_out+0x8f1/0xc10
[  143.625107]  __perf_event_task_sched_out+0x6d0/0x18d0
[  143.625874]  ? lock_is_held_type+0xd7/0x130
[  143.626544]  ? __perf_cgroup_move+0x160/0x160
[  143.627217]  ? set_next_entity+0x304/0x550
[  143.627863]  ? update_curr+0x267/0x740
[  143.628463]  ? lock_is_held_type+0xd7/0x130
[  143.629109]  __schedule+0xedd/0x2470
[  143.629685]  ? io_schedule_timeout+0x150/0x150
[  143.630377]  ? trace_rcu_dyntick+0x1a7/0x250
[  143.631064]  schedule+0xda/0x1b0
[  143.631588]  exit_to_user_mode_prepare+0x114/0x1a0
[  143.632319]  syscall_exit_to_user_mode+0x19/0x40
[  143.633041]  do_syscall_64+0x48/0x90
[  143.633621]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  143.634391] RIP: 0033:0x7ff25f922b19
[  143.634960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  143.637591] RSP: 002b:00007ff25ce98218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  143.638713] RAX: 0000000000000001 RBX: 00007ff25fa35f68 RCX: 00007ff25f922b19
[  143.639754] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff25fa35f6c
[  143.640787] RBP: 00007ff25fa35f60 R08: 000000000000000e R09: 0000000000000000
[  143.641816] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ff25fa35f6c
[  143.642877] R13: 00007ffd68e0596f R14: 00007ff25ce98300 R15: 0000000000022000
[  143.643919]  </TASK>
[  143.644270] irq event stamp: 618
[  143.644885] hardirqs last  enabled at (617): [<ffffffff8133e829>] exit_to_user_mode_prepare+0x109/0x1a0
[  143.646287] hardirqs last disabled at (618): [<ffffffff8425caa5>] __schedule+0x1225/0x2470
[  143.647511] softirqs last  enabled at (488): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  143.648748] softirqs last disabled at (431): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  143.649985] ---[ end trace 0000000000000000 ]---
[  143.663147] hrtimer: interrupt took 15879 ns
[  143.686717] audit: type=1400 audit(1664705714.749:9): avc:  denied  { write } for  pid=3995 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
10:15:14 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9)

10:15:14 executing program 5:
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10)
mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/51)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0xffffffffffffffff)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000, 0xffffffffffffffff)
r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x1)
mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x810, r0, 0x20)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x64)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x63})
r1 = signalfd4(r0, &(0x7f0000000100)={[0x75c04aea]}, 0x8, 0x100000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x80010, r1, 0x0)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x3000)=nil)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
r2 = pkey_alloc(0x0, 0xb7761957b403a282)
pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, r2)

10:15:14 executing program 6:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00')
r3 = openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x200, 0x21, 0x1b}, 0x18)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb)
accept$unix(r3, 0x0, &(0x7f0000000180))
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010040000000000000000b0000000c0001800800030000000000"], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x20058080)
sendmmsg(r4, &(0x7f0000001240)=[{{&(0x7f0000000000)=@ll={0x11, 0x6558, r6}, 0x80, 0x0}}], 0x1, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
close_range(r0, 0xffffffffffffffff, 0x0)

10:15:14 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff4000/0x3000)=nil)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0x0)
shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4000)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x9)

[  144.404210] blktrace: Concurrent blktraces are not allowed on sg0
[  149.814308] Bluetooth: hci1: Opcode 0x c03 failed: -110

VM DIAGNOSIS:
10:15:14  Registers:
info registers vcpu 0
RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888040d97690
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000034 R11=0000000000000001
R12=0000000000000034 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0
RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007ff25ce98700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9b1855f545 CR3=000000003fb04000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 00007ff25fa097c0 00007ff25fa097c8
YMM02=0000000000000000 0000000000000000 00007ff25fa097e0 00007ff25fa097c0
YMM03=0000000000000000 0000000000000000 00007ff25fa097c8 00007ff25fa097c0
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84274587 RDX=ffffed100d9c6fd1
RSI=0000000000000004 RDI=ffff88806ce37e80 RBP=ffff88806ce37e80 RSP=ffff88806cf09b28
R8 =0000000000000000 R9 =ffff88806ce37e83 R10=ffffed100d9c6fd0 R11=0000000000000001
R12=0000000000000003 R13=ffffed100d9c6fd0 R14=0000000000000001 R15=1ffff1100d9e1366
RIP=ffffffff84274604 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb27aee0543 CR3=000000001afd8000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000