Warning: Permanently added '[localhost]:13475' (ECDSA) to the list of known hosts. 2022/09/13 19:17:32 fuzzer started 2022/09/13 19:17:32 dialing manager at localhost:36597 syzkaller login: [ 40.949812] cgroup: Unknown subsys name 'net' [ 41.050758] cgroup: Unknown subsys name 'rlimit' 2022/09/13 19:17:51 syscalls: 2215 2022/09/13 19:17:51 code coverage: enabled 2022/09/13 19:17:51 comparison tracing: enabled 2022/09/13 19:17:51 extra coverage: enabled 2022/09/13 19:17:51 setuid sandbox: enabled 2022/09/13 19:17:51 namespace sandbox: enabled 2022/09/13 19:17:51 Android sandbox: enabled 2022/09/13 19:17:51 fault injection: enabled 2022/09/13 19:17:51 leak checking: enabled 2022/09/13 19:17:51 net packet injection: enabled 2022/09/13 19:17:51 net device setup: enabled 2022/09/13 19:17:51 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/13 19:17:51 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/13 19:17:51 USB emulation: enabled 2022/09/13 19:17:51 hci packet injection: enabled 2022/09/13 19:17:51 wifi device emulation: failed to parse kernel version (6.0.0-rc5-next-20220913) 2022/09/13 19:17:51 802.15.4 emulation: enabled 2022/09/13 19:17:51 fetching corpus: 50, signal 24890/26706 (executing program) 2022/09/13 19:17:51 fetching corpus: 100, signal 37900/41357 (executing program) 2022/09/13 19:17:51 fetching corpus: 150, signal 46161/51171 (executing program) 2022/09/13 19:17:51 fetching corpus: 200, signal 55968/62378 (executing program) 2022/09/13 19:17:51 fetching corpus: 250, signal 64566/72286 (executing program) 2022/09/13 19:17:51 fetching corpus: 300, signal 71510/80501 (executing program) 2022/09/13 19:17:52 fetching corpus: 350, signal 79383/89471 (executing program) 2022/09/13 19:17:52 fetching corpus: 400, signal 83551/94850 (executing program) 2022/09/13 19:17:52 fetching corpus: 450, signal 90632/102877 (executing program) 2022/09/13 19:17:52 fetching corpus: 500, signal 95608/108844 (executing program) 2022/09/13 19:17:52 fetching corpus: 550, signal 99763/114030 (executing program) 2022/09/13 19:17:52 fetching corpus: 600, signal 103810/119051 (executing program) 2022/09/13 19:17:52 fetching corpus: 650, signal 106986/123206 (executing program) 2022/09/13 19:17:53 fetching corpus: 700, signal 111344/128363 (executing program) 2022/09/13 19:17:53 fetching corpus: 750, signal 114257/132175 (executing program) 2022/09/13 19:17:53 fetching corpus: 800, signal 117049/135825 (executing program) 2022/09/13 19:17:53 fetching corpus: 850, signal 119840/139443 (executing program) 2022/09/13 19:17:53 fetching corpus: 900, signal 122744/143161 (executing program) 2022/09/13 19:17:53 fetching corpus: 950, signal 125008/146258 (executing program) 2022/09/13 19:17:53 fetching corpus: 1000, signal 128409/150345 (executing program) 2022/09/13 19:17:54 fetching corpus: 1050, signal 130546/153210 (executing program) 2022/09/13 19:17:54 fetching corpus: 1100, signal 133016/156370 (executing program) 2022/09/13 19:17:54 fetching corpus: 1150, signal 135942/159870 (executing program) 2022/09/13 19:17:54 fetching corpus: 1200, signal 137607/162337 (executing program) 2022/09/13 19:17:54 fetching corpus: 1250, signal 139987/165385 (executing program) 2022/09/13 19:17:54 fetching corpus: 1300, signal 142342/168327 (executing program) 2022/09/13 19:17:54 fetching corpus: 1350, signal 145740/172144 (executing program) 2022/09/13 19:17:55 fetching corpus: 1400, signal 148015/174949 (executing program) 2022/09/13 19:17:55 fetching corpus: 1450, signal 149090/176794 (executing program) 2022/09/13 19:17:55 fetching corpus: 1500, signal 150716/179036 (executing program) 2022/09/13 19:17:55 fetching corpus: 1550, signal 152737/181546 (executing program) 2022/09/13 19:17:55 fetching corpus: 1600, signal 154685/183991 (executing program) 2022/09/13 19:17:55 fetching corpus: 1650, signal 156616/186345 (executing program) 2022/09/13 19:17:55 fetching corpus: 1700, signal 159007/189103 (executing program) 2022/09/13 19:17:56 fetching corpus: 1750, signal 161695/192003 (executing program) 2022/09/13 19:17:56 fetching corpus: 1800, signal 163282/194096 (executing program) 2022/09/13 19:17:56 fetching corpus: 1850, signal 164344/195727 (executing program) 2022/09/13 19:17:56 fetching corpus: 1900, signal 165843/197621 (executing program) 2022/09/13 19:17:56 fetching corpus: 1950, signal 167578/199694 (executing program) 2022/09/13 19:17:56 fetching corpus: 2000, signal 168612/201251 (executing program) 2022/09/13 19:17:56 fetching corpus: 2050, signal 169709/202838 (executing program) 2022/09/13 19:17:56 fetching corpus: 2100, signal 171246/204768 (executing program) 2022/09/13 19:17:56 fetching corpus: 2150, signal 172522/206459 (executing program) 2022/09/13 19:17:57 fetching corpus: 2200, signal 173507/207940 (executing program) 2022/09/13 19:17:57 fetching corpus: 2250, signal 175154/209820 (executing program) 2022/09/13 19:17:57 fetching corpus: 2300, signal 176988/211820 (executing program) 2022/09/13 19:17:57 fetching corpus: 2350, signal 178247/213479 (executing program) 2022/09/13 19:17:57 fetching corpus: 2400, signal 180029/215420 (executing program) 2022/09/13 19:17:57 fetching corpus: 2450, signal 181013/216806 (executing program) 2022/09/13 19:17:57 fetching corpus: 2500, signal 182222/218311 (executing program) 2022/09/13 19:17:58 fetching corpus: 2550, signal 183477/219805 (executing program) 2022/09/13 19:17:58 fetching corpus: 2600, signal 184418/221086 (executing program) 2022/09/13 19:17:58 fetching corpus: 2650, signal 185960/222781 (executing program) 2022/09/13 19:17:58 fetching corpus: 2700, signal 186827/224026 (executing program) 2022/09/13 19:17:58 fetching corpus: 2750, signal 187684/225232 (executing program) 2022/09/13 19:17:58 fetching corpus: 2800, signal 188981/226758 (executing program) 2022/09/13 19:17:58 fetching corpus: 2850, signal 190061/228105 (executing program) 2022/09/13 19:17:59 fetching corpus: 2900, signal 191172/229435 (executing program) 2022/09/13 19:17:59 fetching corpus: 2950, signal 192461/230851 (executing program) 2022/09/13 19:17:59 fetching corpus: 3000, signal 193384/232054 (executing program) 2022/09/13 19:17:59 fetching corpus: 3050, signal 194176/233137 (executing program) 2022/09/13 19:17:59 fetching corpus: 3100, signal 195683/234616 (executing program) 2022/09/13 19:17:59 fetching corpus: 3150, signal 197663/236335 (executing program) 2022/09/13 19:17:59 fetching corpus: 3200, signal 198696/237539 (executing program) 2022/09/13 19:18:00 fetching corpus: 3250, signal 199712/238732 (executing program) 2022/09/13 19:18:00 fetching corpus: 3300, signal 200650/239842 (executing program) 2022/09/13 19:18:00 fetching corpus: 3350, signal 201149/240699 (executing program) 2022/09/13 19:18:00 fetching corpus: 3400, signal 201880/241668 (executing program) 2022/09/13 19:18:00 fetching corpus: 3450, signal 203243/242983 (executing program) 2022/09/13 19:18:00 fetching corpus: 3500, signal 204351/244124 (executing program) 2022/09/13 19:18:00 fetching corpus: 3550, signal 205578/245309 (executing program) 2022/09/13 19:18:00 fetching corpus: 3600, signal 206217/246183 (executing program) 2022/09/13 19:18:01 fetching corpus: 3650, signal 207272/247266 (executing program) 2022/09/13 19:18:01 fetching corpus: 3700, signal 208049/248193 (executing program) 2022/09/13 19:18:01 fetching corpus: 3750, signal 209025/249235 (executing program) 2022/09/13 19:18:01 fetching corpus: 3800, signal 209835/250148 (executing program) 2022/09/13 19:18:01 fetching corpus: 3850, signal 210805/251117 (executing program) 2022/09/13 19:18:01 fetching corpus: 3900, signal 211215/251837 (executing program) 2022/09/13 19:18:01 fetching corpus: 3950, signal 212278/252836 (executing program) 2022/09/13 19:18:01 fetching corpus: 4000, signal 213371/253824 (executing program) 2022/09/13 19:18:02 fetching corpus: 4050, signal 214556/254862 (executing program) 2022/09/13 19:18:02 fetching corpus: 4100, signal 216203/256070 (executing program) 2022/09/13 19:18:02 fetching corpus: 4150, signal 216941/256853 (executing program) 2022/09/13 19:18:02 fetching corpus: 4200, signal 217589/257586 (executing program) 2022/09/13 19:18:02 fetching corpus: 4250, signal 218644/258499 (executing program) 2022/09/13 19:18:02 fetching corpus: 4300, signal 219708/259331 (executing program) 2022/09/13 19:18:03 fetching corpus: 4350, signal 220678/260178 (executing program) 2022/09/13 19:18:03 fetching corpus: 4400, signal 221692/260994 (executing program) 2022/09/13 19:18:03 fetching corpus: 4450, signal 222327/261707 (executing program) 2022/09/13 19:18:03 fetching corpus: 4500, signal 223129/262459 (executing program) 2022/09/13 19:18:03 fetching corpus: 4550, signal 223595/263072 (executing program) 2022/09/13 19:18:03 fetching corpus: 4600, signal 224160/263655 (executing program) 2022/09/13 19:18:03 fetching corpus: 4650, signal 225120/264423 (executing program) 2022/09/13 19:18:03 fetching corpus: 4700, signal 226080/265146 (executing program) 2022/09/13 19:18:04 fetching corpus: 4750, signal 226962/265861 (executing program) 2022/09/13 19:18:04 fetching corpus: 4800, signal 227506/266438 (executing program) 2022/09/13 19:18:04 fetching corpus: 4850, signal 227935/267015 (executing program) 2022/09/13 19:18:04 fetching corpus: 4900, signal 228496/267566 (executing program) 2022/09/13 19:18:04 fetching corpus: 4950, signal 229499/268283 (executing program) 2022/09/13 19:18:04 fetching corpus: 5000, signal 230415/268954 (executing program) 2022/09/13 19:18:04 fetching corpus: 5050, signal 231183/269593 (executing program) 2022/09/13 19:18:05 fetching corpus: 5100, signal 231957/270209 (executing program) 2022/09/13 19:18:05 fetching corpus: 5150, signal 232990/270852 (executing program) 2022/09/13 19:18:05 fetching corpus: 5200, signal 233462/271343 (executing program) 2022/09/13 19:18:05 fetching corpus: 5250, signal 234266/271965 (executing program) 2022/09/13 19:18:05 fetching corpus: 5300, signal 235037/272517 (executing program) 2022/09/13 19:18:05 fetching corpus: 5350, signal 235707/273035 (executing program) 2022/09/13 19:18:06 fetching corpus: 5400, signal 236522/273588 (executing program) 2022/09/13 19:18:06 fetching corpus: 5450, signal 237000/274021 (executing program) 2022/09/13 19:18:06 fetching corpus: 5500, signal 237850/274569 (executing program) 2022/09/13 19:18:06 fetching corpus: 5550, signal 238374/275004 (executing program) 2022/09/13 19:18:06 fetching corpus: 5600, signal 238991/275536 (executing program) 2022/09/13 19:18:06 fetching corpus: 5650, signal 239658/276010 (executing program) 2022/09/13 19:18:06 fetching corpus: 5700, signal 240216/276469 (executing program) 2022/09/13 19:18:07 fetching corpus: 5750, signal 241159/276975 (executing program) 2022/09/13 19:18:07 fetching corpus: 5800, signal 241692/277376 (executing program) 2022/09/13 19:18:07 fetching corpus: 5850, signal 242318/277783 (executing program) 2022/09/13 19:18:07 fetching corpus: 5900, signal 242778/278142 (executing program) 2022/09/13 19:18:07 fetching corpus: 5950, signal 243309/278534 (executing program) 2022/09/13 19:18:07 fetching corpus: 6000, signal 243851/278959 (executing program) 2022/09/13 19:18:07 fetching corpus: 6050, signal 244395/279335 (executing program) 2022/09/13 19:18:08 fetching corpus: 6100, signal 244970/279725 (executing program) 2022/09/13 19:18:08 fetching corpus: 6150, signal 245427/280102 (executing program) 2022/09/13 19:18:08 fetching corpus: 6200, signal 246217/280473 (executing program) 2022/09/13 19:18:08 fetching corpus: 6250, signal 246839/280796 (executing program) 2022/09/13 19:18:08 fetching corpus: 6300, signal 247417/281187 (executing program) 2022/09/13 19:18:08 fetching corpus: 6350, signal 248268/281559 (executing program) 2022/09/13 19:18:08 fetching corpus: 6400, signal 248748/281885 (executing program) 2022/09/13 19:18:09 fetching corpus: 6450, signal 249604/282203 (executing program) 2022/09/13 19:18:09 fetching corpus: 6500, signal 250149/282507 (executing program) 2022/09/13 19:18:09 fetching corpus: 6550, signal 250611/282795 (executing program) 2022/09/13 19:18:09 fetching corpus: 6600, signal 251068/283081 (executing program) 2022/09/13 19:18:09 fetching corpus: 6650, signal 251832/283375 (executing program) 2022/09/13 19:18:09 fetching corpus: 6700, signal 252337/283652 (executing program) 2022/09/13 19:18:09 fetching corpus: 6750, signal 252917/283903 (executing program) 2022/09/13 19:18:09 fetching corpus: 6800, signal 253426/284144 (executing program) 2022/09/13 19:18:10 fetching corpus: 6850, signal 253782/284382 (executing program) 2022/09/13 19:18:10 fetching corpus: 6900, signal 254410/284758 (executing program) 2022/09/13 19:18:10 fetching corpus: 6950, signal 254919/284996 (executing program) 2022/09/13 19:18:10 fetching corpus: 7000, signal 255478/285080 (executing program) 2022/09/13 19:18:10 fetching corpus: 7050, signal 255805/285083 (executing program) 2022/09/13 19:18:10 fetching corpus: 7100, signal 256785/285120 (executing program) 2022/09/13 19:18:10 fetching corpus: 7150, signal 257464/285141 (executing program) 2022/09/13 19:18:11 fetching corpus: 7200, signal 257743/285164 (executing program) 2022/09/13 19:18:11 fetching corpus: 7250, signal 258363/285170 (executing program) 2022/09/13 19:18:11 fetching corpus: 7300, signal 259186/285211 (executing program) 2022/09/13 19:18:11 fetching corpus: 7350, signal 259499/285212 (executing program) 2022/09/13 19:18:11 fetching corpus: 7400, signal 260288/285219 (executing program) 2022/09/13 19:18:11 fetching corpus: 7450, signal 260777/285250 (executing program) 2022/09/13 19:18:11 fetching corpus: 7500, signal 261199/285250 (executing program) 2022/09/13 19:18:12 fetching corpus: 7550, signal 261710/285255 (executing program) 2022/09/13 19:18:12 fetching corpus: 7600, signal 262101/285256 (executing program) 2022/09/13 19:18:12 fetching corpus: 7650, signal 262590/285262 (executing program) 2022/09/13 19:18:12 fetching corpus: 7700, signal 263287/285266 (executing program) 2022/09/13 19:18:12 fetching corpus: 7750, signal 263865/285269 (executing program) 2022/09/13 19:18:12 fetching corpus: 7800, signal 264305/285282 (executing program) 2022/09/13 19:18:12 fetching corpus: 7850, signal 264750/285282 (executing program) 2022/09/13 19:18:12 fetching corpus: 7900, signal 265151/285284 (executing program) 2022/09/13 19:18:13 fetching corpus: 7950, signal 265526/285314 (executing program) 2022/09/13 19:18:13 fetching corpus: 8000, signal 265910/285314 (executing program) 2022/09/13 19:18:13 fetching corpus: 8050, signal 266322/285316 (executing program) 2022/09/13 19:18:13 fetching corpus: 8100, signal 266819/285332 (executing program) 2022/09/13 19:18:13 fetching corpus: 8150, signal 267209/285333 (executing program) 2022/09/13 19:18:13 fetching corpus: 8200, signal 267465/285354 (executing program) 2022/09/13 19:18:13 fetching corpus: 8250, signal 267925/285375 (executing program) 2022/09/13 19:18:13 fetching corpus: 8300, signal 268359/285384 (executing program) 2022/09/13 19:18:14 fetching corpus: 8350, signal 268631/285388 (executing program) 2022/09/13 19:18:14 fetching corpus: 8400, signal 269065/285394 (executing program) 2022/09/13 19:18:14 fetching corpus: 8450, signal 269432/285394 (executing program) 2022/09/13 19:18:14 fetching corpus: 8500, signal 269705/285394 (executing program) 2022/09/13 19:18:14 fetching corpus: 8550, signal 270066/285430 (executing program) 2022/09/13 19:18:14 fetching corpus: 8600, signal 270446/285441 (executing program) 2022/09/13 19:18:14 fetching corpus: 8650, signal 270872/285464 (executing program) 2022/09/13 19:18:14 fetching corpus: 8700, signal 271134/285467 (executing program) 2022/09/13 19:18:15 fetching corpus: 8750, signal 271577/285494 (executing program) 2022/09/13 19:18:15 fetching corpus: 8800, signal 272505/285494 (executing program) 2022/09/13 19:18:15 fetching corpus: 8850, signal 272846/285500 (executing program) 2022/09/13 19:18:15 fetching corpus: 8900, signal 273370/285526 (executing program) 2022/09/13 19:18:15 fetching corpus: 8950, signal 273629/285534 (executing program) 2022/09/13 19:18:15 fetching corpus: 9000, signal 273909/285554 (executing program) 2022/09/13 19:18:15 fetching corpus: 9050, signal 274373/285582 (executing program) 2022/09/13 19:18:16 fetching corpus: 9100, signal 275056/285587 (executing program) 2022/09/13 19:18:16 fetching corpus: 9121, signal 275189/285589 (executing program) 2022/09/13 19:18:16 fetching corpus: 9121, signal 275189/285589 (executing program) 2022/09/13 19:18:18 starting 8 fuzzer processes 19:18:18 executing program 0: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) umount2(&(0x7f0000000240)='./file0\x00', 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x80000) r2 = fspick(r1, &(0x7f0000000380)='./file0/file0\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000003c0)={0x3}) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x8, 0x3) openat(r1, &(0x7f00000004c0)='./file1\x00', 0x2, 0x1c4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2004, @fd=r2, 0x38ea, 0x0, 0x0, 0x1, 0x0, {0x2}}, 0x5) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_mount_image$iso9660(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x2, 0x2, &(0x7f0000000740)=[{&(0x7f0000000680)="c24d53b3f2e599de07e964f4983a52a704ca45801fcf17255919b61f78222127b37b", 0x22, 0x8}, {&(0x7f00000006c0)="8bcd9233d1e38e54cc43e80405660943d77da608b8ea51119e220768ad6c34ad8f1dab51f16a86972f8cc53fa3409e8fcdd12c071457f6af6557e9396119bc00b215c4ee3238", 0x46, 0x30}], 0x0, &(0x7f0000000780)={[{}], [{@uid_lt={'uid<', r3}}, {@fowner_lt={'fowner<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000800)={@desc={0x1, 0x0, @desc3}}) ioctl$int_in(r1, 0x5421, &(0x7f0000000880)) recvfrom$unix(r1, &(0x7f00000008c0), 0x0, 0x4000c060, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) r5 = inotify_init1(0x800) lchown(&(0x7f0000000980)='./file1\x00', r3, r0) r6 = syz_open_dev$usbmon(&(0x7f00000009c0), 0x6, 0x2000) fcntl$setownex(r6, 0xf, &(0x7f0000000a00)={0x2}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000a40)={0x1, 0x7, 0x1}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000003280)={r5, 0x7fffffff, 0x101, 0x16}) 19:18:18 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="e2de8073f262c43abf96e8942d9b53be60b07cd24e1433174d99c3f79b58f0780bd6f21bed2686a37cd66f4faf471fa7fe6cb2036222", 0x36, 0x3, &(0x7f0000000080)={r0, r1+60000000}) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x3, 0x7fff, 0x3, 0x5, 0x40, 0xffffffff, 0x4eea}, &(0x7f0000000100)={0x7fffffff, 0x1bd, 0x192a, 0x8, 0x5, 0x2, 0x80, 0x96b7}, &(0x7f0000000140)={0x80000001, 0x6, 0x477d55bf, 0x9, 0x1f, 0xffffffff, 0x8, 0x7fff}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) futex(&(0x7f0000000240)=0x2, 0x2, 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)=0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/162, 0xa2}, {&(0x7f00000006c0)=""/84, 0x54}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/230, 0xe6}], 0x1, &(0x7f0000000900)=""/212, 0xd4}, 0x4}, {{&(0x7f0000000a00)=@can, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a80)=""/219, 0xdb}, {&(0x7f0000000b80)=""/115, 0x73}], 0x2, &(0x7f0000000c40)=""/186, 0xba}}, {{&(0x7f0000000d00)=@phonet, 0x80, &(0x7f0000003100)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/166, 0xa6}, {&(0x7f0000001e40)=""/193, 0xc1}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/134, 0x86}, {&(0x7f0000003000)=""/143, 0x8f}, {&(0x7f00000030c0)=""/39, 0x27}], 0x7}, 0x9}, {{&(0x7f0000003180)=@tipc=@id, 0x80, &(0x7f0000003300)=[{&(0x7f0000003200)=""/141, 0x8d}, {&(0x7f00000032c0)=""/29, 0x1d}], 0x2, &(0x7f0000003340)=""/228, 0xe4}, 0x40}, {{&(0x7f0000003440)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003500)=[{&(0x7f00000034c0)=""/23, 0x17}], 0x1, &(0x7f0000003540)=""/26, 0x1a}, 0xc1c}, {{&(0x7f0000003580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003600)=""/131, 0x83}, {&(0x7f00000036c0)=""/63, 0x3f}, {&(0x7f0000003700)=""/160, 0xa0}], 0x3, &(0x7f0000003800)=""/190, 0xbe}, 0x7}], 0x7, 0x0, &(0x7f0000003a80)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_mount_image$nfs4(&(0x7f0000003ac0), &(0x7f0000003b00)='./file0\x00', 0x8, 0x7, &(0x7f0000003e80)=[{&(0x7f0000003b40)="3f9bb8ef7ad8244d15bd2bccc7641614b7a27f14eaf2dcd052e5c8ece106194afc", 0x21, 0x1}, {&(0x7f0000003b80)="b73a6ce17e4b2cb75be0a20525cc0ca6276186719655ac971df148267ade4efdb8092d76b0c1de87e0cf2503fe965130492917ea5ee50c8fa6cd9d55ae6450193d19ac0075324573d084677d2143fc5a4fe5bc40acfb7ef5012d1e4cc196dc167faeebeee254da411caeb081eab680be2a666e12bfb680121be03e78a9fb23a8d6f0e6e8e4619f665a5e7261db8e1865edd21528789f7bcbc1c105276134e18fed831d677c750e65863a82c2b4e66a2fcfe5cabe6cb54bac", 0xb8, 0x3}, {&(0x7f0000003c40)="3ce5f03b0677d8c300ba7dcdd15111e9367277cd952f87d66863cfe3b0c4820064a6a077af3dc5e7520fc0908bb8e06cd1b3c9108914de2ff77f94be65415499141b8d6a45542ae2cd38052494b9a2fbc0bb99fe632d9c481f26e4144a46bdffde7d58e6660f010fc5bbde188f82289d88529578aee1071b5210f31131768663fde1fcec17a1671f91aad03162cdde270962cf", 0x93, 0x2}, {&(0x7f0000003d00)="cf40ec3b75302936756bc77a264053611bb599529a6fe4190b9c67fa8931916e84b7030ecc5873b17462442300245fdbb570a80c", 0x34, 0x8}, {&(0x7f0000003d40)="3a38fa157faf2564a8f7b9e44b773989fd4038be519d5f45331d569f6aa77391710d0dc84ef17c8977f35f9bbb03240d4b1b0cf12b8218da241c90c5c21d58cb57c9ff0a268295654d5e0d4340c4fc5123d4c1f4f0b4c1c7e30b50dc83a1", 0x5e, 0x3}, {&(0x7f0000003dc0)="80a9a712e50886e0", 0x8, 0x3}, {&(0x7f0000003e00)="52a7a2ce6d954e65985f2daad594ca273e77c4659aeec8e265e0786285217f4b3aaa333441cc3071a9c6f7444d64224e6073ce9368a776b2457e613f13f71cd2f49007fc235356b6e2aae9cd1ebab21c2085962a025a97de44ceb15ae67f1f317cd7d466b9471c588abde6021d26be5e45a9422f78", 0x75, 0x2}], 0xe0088, &(0x7f0000004040)={[{}, {}, {'^-'}, {'%}'}, {}, {}, {'+\xb7!\xeb#---&*\xf8.:'}, {'))@\xa9,^^f'}], [{@subj_role={'subj_role', 0x3d, '!\xb5$'}}, {@uid_lt={'uid<', r3}}, {@fowner_eq}, {@appraise_type}, {@fsname={'fsname', 0x3d, '&^!'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000004100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) epoll_pwait2(r4, &(0x7f0000004140)=[{}], 0x1, &(0x7f0000004180), &(0x7f00000041c0)={[0x4]}, 0x8) clock_gettime(0x0, &(0x7f0000004240)={0x0, 0x0}) futex(&(0x7f0000004200)=0x1, 0xd, 0x0, &(0x7f0000004280)={r5, r6+10000000}, &(0x7f00000042c0), 0x1) clock_gettime(0x6, &(0x7f0000004300)) futex(&(0x7f0000004340)=0x1, 0xa, 0x2, &(0x7f0000004380)={0x0, 0x3938700}, &(0x7f00000043c0), 0x0) io_getevents(0x0, 0xffffffff, 0x1, &(0x7f0000004400)=[{}], &(0x7f0000004440)={0x0, 0x989680}) clock_gettime(0x0, &(0x7f00000044c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000004480)={[0x100]}, 0x0, &(0x7f0000004500)={r7, r8+60000000}, 0x8) clock_gettime(0x0, &(0x7f0000004540)={0x0, 0x0}) nanosleep(&(0x7f0000004580)={r9, r10+60000000}, &(0x7f00000045c0)) clock_getres(0x3, &(0x7f0000004600)) io_pgetevents(0x0, 0x3f, 0x6, &(0x7f0000004680)=[{}, {}, {}, {}, {}, {}], &(0x7f0000004780), &(0x7f0000004800)={&(0x7f00000047c0)={[0x2]}, 0x8}) 19:18:18 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@rand_addr=0x64010102, 0x4e21, 0x1f, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3b, 0x0, 0xee01}, {0x1, 0x1ff, 0x4, 0x41bb, 0xe309, 0x6, 0x10001, 0x4}, {0x2bba, 0x100000000, 0x9, 0x7}, 0x1f, 0x6e6bbe, 0x0, 0x0, 0x3, 0x2}, {{@in=@empty, 0x4d5, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3505, 0x0, 0x0, 0x20, 0x3, 0x2, 0x1000}}, 0xe8) r1 = dup2(0xffffffffffffffff, r0) r2 = open(&(0x7f0000000140)='./file0/file0\x00', 0x40000, 0xa0) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000180)={0x6c, 0x3, 0x5, 0x10000}) r3 = eventfd2(0x5, 0x1) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000200)=r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000002800)={{0x1, 0x1, 0x18, r0, {0xc1d}}, './file0/file0\x00'}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002840), 0x1, 0x0) sendfile(r5, r6, &(0x7f0000002880)=0x18, 0x9) stat(&(0x7f00000028c0)='./file0/file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) inotify_add_watch(r0, &(0x7f0000002980)='./file0/file0\x00', 0x800) write(r6, &(0x7f00000029c0)="338c208bbf3aa90d7d3b77c78454c39696c894ec08617fe603b0c426d2d11777576dd893defbb6c53f0ff5a55be7e48569d69d69fbb79876d81967a88fcfea0232f1809032e6f8bdc6048ba604c93e33a72496f330661bb601e64b7d7ae0fc712109150861cb926cda8ef2748c0e00347727d7dd3cde9f92", 0x78) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000002a40)) sendfile(r3, r0, &(0x7f0000002a80)=0x526d, 0x1) mount$9p_unix(&(0x7f0000002ac0)='./file0/file0\x00', &(0x7f0000002b00)='./file0/file0\x00', &(0x7f0000002b40), 0x904004, &(0x7f0000002b80)={'trans=unix,', {[{@access_client}, {@privport}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@debug={'debug', 0x3d, 0x4}}, {@posixacl}, {@cache_none}], [{@smackfsroot}]}}) recvfrom$inet6(r0, &(0x7f0000002c00)=""/86, 0x56, 0x20, &(0x7f0000002c80)={0xa, 0x4e22, 0x6cb, @empty}, 0x1c) syz_mount_image$vfat(&(0x7f0000002cc0), &(0x7f0000002d00)='./file0\x00', 0x400, 0x3, &(0x7f0000002f00)=[{&(0x7f0000002d40)="9499a263b7ff93b4caa21c94f8bbde5e76457ad69a2f747bb93669fde68758dd18509275c8e0c0e171cf0513829b648be75df1102e178b1577731be0b7c2742989", 0x41}, {&(0x7f0000002dc0)="abfddb8a58d9fe7a708b7d6d7cc2939ccfd49fb710a502593573d1cc14dcb6a986cea4f2bf6b7e65f3357749f7e4b644a6d80152a19c55b96bede1b197535d44c76f0c824fdb3f20a280e8d81d77b1ae316d714f8505353af89a29e1ff9f806beaf8bfd21e507491ebcb2343ffd755ce4d59c778b29438c3aed96f57e72dea83bd1bcc2b1eee585937dc26da888c108bb991c1dfecf087fbe019e7494b7daaef1f3a278e893bd2c0760683f6ecb37d7de6a93c73ccecf0c175be30ad6b1f2dc6611b741e8c0cd36a0256cc812bb60255f3", 0xd1, 0x9}, {&(0x7f0000002ec0)="be4bcbaea009d26316f73da67043cbe2769352e6c287161724876c7491d830b8725069738862a4aba036", 0x2a, 0x4}], 0x1000, &(0x7f0000002f80)={[{@uni_xlateno}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp737'}}], [{@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@euid_lt={'euid<', r7}}]}) pread64(r3, &(0x7f0000003000)=""/133, 0x85, 0x4) 19:18:18 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@x25, &(0x7f0000000100)=0x80) connect(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x1, 0x2, 0x1}}, 0x80) fstat(r1, &(0x7f00000001c0)) syz_io_uring_setup(0x4d10, &(0x7f0000000240)={0x0, 0x1c40, 0x20, 0x1, 0x1f0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1}, 0x519) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) r4 = accept$unix(r0, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fcntl$setpipe(r1, 0x407, 0xffffffff) r5 = fsmount(r0, 0x0, 0x76) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x10}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r6 = accept4(r2, &(0x7f0000000840)=@pppol2tp, &(0x7f00000008c0)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000900)={{0x1, 0x1, 0x18, r0, {0x8c, 0x993}}, './file0\x00'}) write$P9_RXATTRWALK(r7, &(0x7f0000000940)={0xf, 0x1f, 0x2}, 0xf) syz_open_procfs(0x0, &(0x7f0000000980)='net/ip_vs_stats_percpu\x00') r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x41, 0x0) sendfile(r8, r6, 0x0, 0x401) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'geneve0\x00'}) [ 82.260315] audit: type=1400 audit(1663096698.686:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:18:18 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x20, 0xfffffffffffff001, 0x8001}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x10, 0x1, 0x80, 0x1, {{0x20, 0x4, 0x2, 0x2, 0x80, 0x66, 0x0, 0x4, 0x29, 0x0, @multicast1, @private=0xa010102, {[@rr={0x7, 0x17, 0x8, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xb7, [@local, @local, @broadcast]}, @lsrr={0x83, 0x1b, 0x4c, [@remote, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010100, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2]}, @cipso={0x86, 0x6, 0x9cb79f3124c4c4bb}, @cipso={0x86, 0x11, 0x1, [{0x1, 0xb, "0cd8c2287f65971e62"}]}, @generic={0x89, 0x5, "7bd5d7"}]}}}}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe0, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000080) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) getsockname$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f0000000640)=0xe8) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x7c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80080}, 0x4) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000814}, 0x900) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000880)={@loopback, r5}, 0x14) sendmmsg(r0, &(0x7f00000011c0)=[{{&(0x7f00000008c0)=@rc={0x1f, @any, 0x8}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000940)="28cc5351ff38db250661e28f14329c784143ae610cf9fb31ec4fc8cca5415100a45e7d90983546cde5a3", 0x2a}], 0x1}}, {{&(0x7f00000009c0)=@qipcrtr={0x2a, 0xffffffff}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)="792cc37e5668494dc27ba860bd098d5c13596959c1b2df6d7869f3256816f100fdb8d4ba7d4c0dfe4426ac994dd14c673f1253038ea864fa943bc88bf683fd23eb4018df3f18d2d9ffd098b1b55cdbedebd46bc06140691ed07edbde76e5b17b3b90538dc719c7f1323aa36a8deb49822dbee873033bcd3c9230f8525695145a27f8aaf52b848fe82c34daacb1eefc77fc98a4b964baebddc8ec26df207e3152e5793cfec84ffcb6c539df9d3894eb1e4aaac1d1dcde9e0e4895f4873c0ea2c207069193ad3562b0e3ceb2f1363a9e679a1d6d560805d86c384eca8099fea8c02df3db6249aca59e6f272eea2cb5c1aa", 0xf0}], 0x1, &(0x7f0000000b80)=[{0xd0, 0x109, 0x3f, "8747419a02852e3ef3474350efef4a7abc3bf3bc6a4d23129240c01121bc2dcf89be4c157a863caa941c6d7bec2e9824d2cc0c87095c461fe767737dbb94dbc50f1539a20d8498ac5a26f0e510d3d7f745769c6c5532a5e9f4fd61a1d5b0fd85ead78490292b91e4ebb7b42450ed415bbcaca9e29c0f4f08efa8180f3586e8f05656de43ce7bc7fb4f845fc19143a1bf2cf4a1a0a36498f8a6cd269888322304f9af55bdd82411778939b8e0442d0001eaa928a36334aac1bd809f347b"}, {0xb8, 0x114, 0x1, "ad9f20f4f8206b1bd25d92f76869101bdfc22b00a97fa7cd316106bba91a224e9cc293cc6669cb29c0630ea94e9f5b0ca6a1175b770f9c9201ca233a184cb11f227024d1f04b6518313e864091fd4c58e28a8944b1a8ba2b968366b076e7921a766391799c37281e105e9ef0e88ebccaeb0ca11669acd87e60f0770e5d87adbbc3af809db94ba03740664c01eb286edf4c4bd966c2811e30c871723a1bc3bd7cf2ab6f"}, {0xf0, 0x1, 0x1, "51dc0bfe5c54aada8c66de42587580645fe81d4d4d1554b25c07d2503068a9e1d176dfc28f8b4deab81440c5ab6c0c80e0bc3671f77666d74de50e10f0ce1a161e188d30470715975629de7c3d7bfcb66b7dfb9cf4f8240ac266e3191579f9906cc4c8df3fd018474eb68076f9553cec94ee9f040bf706ac5b6da4442efaab740ed50e2b65aebaab87e7fd7ca6dd4ba816ef58c26bdaf6f8b0a487b04c74e50bf52a502d6b0618582d5a08da384417d33e32ae08c5583b35e8e2599230a1d3067fec6a87afb15cf93535d0df3d527953313b61685a33cf0096629a28bb"}], 0x278}}, {{&(0x7f0000000e00)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @private2, 0x6}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e80)="80c77f8daec718e559bc648e879f1bcad09708258ab10f65fc89c0a60805b5c0930f4638cce265690bb7666a233ae87f715dbd8f0c863b47d961b386a52b6f59183c884b6af8e8745f4441b0fd79e7fb2b658498859b28e65d98c5ba85eb440d085990aa57396ff3bcc70b33", 0x6c}, {&(0x7f0000000f00)="9f91a98af075ac6a9af6e0512ce646d231908edf7e729ef484b883981f4c97651e8efed888e9e725ce80aedcc1b116430b0f7293488c42c269dd6d0798d7f04e5ffe38c4492c656d30ad81e35a117134c501bbddb514bb99ec4bee29cd892d1a7b18c5c5", 0x64}], 0x2, &(0x7f0000000fc0)=[{0xc8, 0x1, 0x2, "abdf9d2963644cf5c09c0c86df111fb5ea8780a81e9c46c839e350c938375cd740d210dd631d52b4db1636835d33a1ad08b7ef9d9d0d6509cde8782e79934031347c6f86857b281dc384377b69b8865279deb07e79332e6755332645b76e134f41f27cee587ef975639c1f3079519a151b771bc5a4033c2952b0214caf5ace91d6b8cc63dbde10a94abc81e308d20198bf656063fb87a219d48e3eebf54ea3b28a4abecbb52119761bd69c879edebc3909dd74ed8e62"}, {0x90, 0x119, 0x5, "b5e528b70427622185eb2cd85da50e6716d1d97761a1bbbbf94932cf7817c066a64def44c026bbaa1c4270835e1c683a725c2881fa43b5446059c337f9eedcd5279fadc2db9b11388fb70806004ddd76af5c8324dab0d93101b5c75db44a17370e17e1898357e15e9c7716ffd2fe8f970d28b56a7094be26bb5b"}, {0x70, 0x10e, 0xbf4, "df5cff23d997d4c61032cade0aaf412379782a40d8774eb1c26d0acb0f3d02db156bc58ad3184afc3da5f3be15db5ce2271acc83f03facbd1bdc9a04ca8dbde896e5b63fa8eccb249e28dedd5714eb440d330b6389e8bd9394a8069e2d4560"}, {0x28, 0x10e, 0x1, "1048d9cb52f169f2d8cf5c42b30e37d5759128df"}], 0x1f0}}], 0x3, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000001300)={'syztnl0\x00', &(0x7f0000001280)={'syztnl1\x00', r4, 0x4, 0x1f, 0x8, 0x4, 0x40, @dev={0xfe, 0x80, '\x00', 0x33}, @private2, 0x8, 0x7800, 0x5, 0x2}}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000001380), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, r6, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x8000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x6c, r3, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000010) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000001840)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001600)={0x1c8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf16a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xebab, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f22}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9a72, @local, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x38, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x400}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ef024c32aefd"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004804) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000001980)={{0x1, 0x1, 0x18, r7, @in_args={0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6ce4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x11) 19:18:18 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_cache\x00') r2 = syz_io_uring_setup(0x3d2c, &(0x7f0000000040)={0x0, 0x978f, 0x2, 0x0, 0x349}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r4 = syz_io_uring_setup(0x15e4, &(0x7f0000000140)={0x0, 0xd833, 0x10, 0x1, 0x51, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x5) sendfile(0xffffffffffffffff, r0, &(0x7f0000000280)=0x4, 0x6) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x41a080, 0x0) write(r6, &(0x7f0000000300)="6e09d59a546d99bfebcec14184d8fd55810039e3adef34ece8ca01c66681201bc5756c62e94812490e382388bd6cd7671ecac41368a768793ef6eee8a22025fee57d9bb22ba367038b6d3c0e09148cc18ff76cc47e555ae20b3a1896f571ae70be5ca8c4ba0b81742b8bebbed763acc192ab452a242dd3b77354279e37e64c3434eaa5d68d0efb3706902b95fb83124a2fad4d7555e3c26b3fcbea92a3d6ac26013fe2d9aeea0db7be73355039c922032554d08da81b56aee75d1acc23c10557176c624f61fe01afb8e72cac25f495a87619f858358c310c800e5291", 0xdc) syz_io_uring_setup(0x392f, &(0x7f0000000400)={0x0, 0xd5b1, 0x0, 0x0, 0x2d9, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000480)=0x0, &(0x7f00000004c0)) r8 = syz_io_uring_setup(0x561c, &(0x7f0000000500)={0x0, 0x8ed1, 0x4, 0x3, 0x392, 0x0, r2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000580), &(0x7f00000005c0)) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000600)=@IORING_OP_NOP={0x0, 0x3}, 0xffffffff) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r8, 0x10000000) syz_io_uring_submit(r7, r10, &(0x7f0000000640)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0xada, {0x0, r6}, 0x7, 0x4, 0x1, {0x0, 0x0, r4}}, 0xdbbf) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000680), 0x300, 0x0) r12 = syz_mount_image$nfs4(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x80000000, 0x4, &(0x7f0000000a00)=[{&(0x7f0000000740)="5707d9de976c99972c8614410b256524228d0cc2097844ba23e0433721849bcf20432b9aadc387d332421ad9bf65decb225b8c875c4a671a18460dc85512d97714f569cea1a76203c6a4c02f5ed252a9ab8361fa658fa6f02d64cd1a8edfe7643f6046bbd2ec64b508ec7fbc5182cb23ff6ec264207849080b30107d839e062aa88bcd51f4f77538a4fc4f5ada296dd0d939704eb55b230916669ae1dda2c2e21b8bb411fe061bd3e9d20b830d3ea2521a5a7504987ce5d76db31d2bc7f532c0cb4c7d80ac16d9efcc7cc1431157146db21b044bae54416f7d0d2155dfd51b45003b584a9d0594c7f9bb51", 0xeb, 0x9}, {&(0x7f0000000840)="5a8e87950280eaccbcbb22837af99fd7938c664c06501b46357375cbfff6e39c714f1736690644fbc515dfbb664ea6444fabd1b221bf48a90658a64019a625d4cc73456810db58e14d2a35f421ab86cd72ac2b17c33a71bfd100f22a307a6b48354b2fe0268eda71ce915461000acd530ab26b1bc67343f77e90d9eef755f485a07084ba50e58d5dd3e7469aa3edccd9dbd8df53c78e4f6d05013b363d8f308ee3626ae986f67115ee4a4564092c1e6bf8987c669198ee8d", 0xb8, 0x64}, {&(0x7f0000000900)="397328a1cb449d10018ca046a3500026936b954dfe51f4c60cc1344115c96136f281b92fea804ff23def508509b3dca38cb744167f6b260477e28d060123852b622e6a5e3c3d81457d30a384b0fb1e6e15092037cc0a72be05c7e20ee49d709a9cae97a54cc2258e6a83bc294a6d872f6fe29f565d5b761996d90c4f3e5790e25390e0c4b164fc3588522b96d9a87ecf306945458b063b35d12be54d960aa6ea05a59c5d7b8c6fa5b68bc51688824527cdb8c9785215efb3dab7", 0xba, 0x6}, {&(0x7f00000009c0)="2aafd5ea53862e9f1574bd179920204d330b8d82", 0x14, 0x3}], 0x0, &(0x7f0000000a80)={[{'net/ip6_mr_cache\x00'}, {'/dev/net/tun\x00'}, {'/dev/net/tun\x00'}, {'net/ip6_mr_cache\x00'}, {'net/ip6_mr_cache\x00'}, {}], [{@smackfsdef={'smackfsdef', 0x3d, '[/*\x1c'}}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/net/tun\x00'}}, {@obj_user={'obj_user', 0x3d, '](##,^/\'::^*'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, '\'^$-{\xe2%@'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000b80)=[r8, r6, r8, r1, r8, r11, r1, r4, r12, r6], 0xa) lsetxattr$security_selinux(&(0x7f0000000bc0)='./file0/file0\x00', &(0x7f0000000c00), &(0x7f0000000c40)='system_u:object_r:policy_src_t:s0\x00', 0x22, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) 19:18:18 executing program 6: r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$^!\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="0c9ab47df838e8cd354b828556ede4b167500d4084580862c7eb3ec3e6eeb2292b1dd882c92a6995c1701ab317387930c32ce846e01ab122ec7599e7a9b2f5da4cb459ebfc2b609d32e70a2a5f30f300d23dabe3ef7aba4eab73c6fa2951f633a4b8e6909057cc079839f913490377a48d3065ca8a93a245beea299de2ae0ad8130489929586d47bac46e6d3d7df5ffebd02d53948aa7b8d5b96744c34049443e381beadd913a0d6694caacef24180fadcffc653bc9278", 0xb7, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="9b827a0cecd3ff4751c04b1ee03e39cd0a9eaa13dd036d06cdf761c725ed75af896b44", 0x23, 0x0) r4 = add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="e26ea843d25551ed6b78d04db7a2a46417d7363c1b987e8e56be83db1637be403cb1c0aec1cf7a006bb64ab6", 0x2c, r3) r5 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r2) r6 = request_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='big_key\x00', 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000540)='id_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="f527dec8971a7791fceceac2f0f019b910f27dbdce34e171701c57a2455198b053be3d00631657a2068a86c63ac2fed355547c4aae75855cda09be2c24da303c213adabda96238a94cf778d7f42fe26ab2f5d1a07ddbc84e65bb83e442d0a4c426669fb1c8e2d191ef7eb1fcf5e1093a19fdb753dd2178", 0x77, 0xfffffffffffffff8) r8 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "2478fba0d8e966e6823dae437092022c8045470084f9ae3420ec242e8079fea879dbb29925c952f109011017e7e44fd012a1f59fbf815014f952528128eac151", 0x2c}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r7, r5, r8, 0x0) r9 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r9, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x3}, r5) keyctl$link(0x8, r6, r8) keyctl$read(0xb, r8, &(0x7f0000000840)=""/52, 0x34) add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, r0) r10 = add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc3}, &(0x7f0000000980)={0x0, "66ca797f1e8e84147e9f05e8681d3b9920cd6f2047375576150ccf84407797bc66778c2caaa2bec2d9ee16142771024d34d4ac94aabffe5a429aa5f5a4de29be", 0x1f}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffa, r10, 0x1) r11 = request_key(&(0x7f0000000a00)='id_resolver\x00', &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)='\xafY%\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, r11, r10, 0x0) keyctl$unlink(0x9, r4, 0xffffffffffffffff) 19:18:18 executing program 7: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x334, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c0}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xeeb}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xccc2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x337}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x851}, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) getxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'btrfs.', ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, &(0x7f0000000600)=""/226, 0xe2) tee(r0, r0, 0x9, 0xa) mount$9p_xen(&(0x7f0000000700), &(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780), 0x8000, &(0x7f00000007c0)={'trans=xen,', {[{@cache_fscache}, {@nodevmap}], [{@measure}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, 'ib\x00'}}]}}) close(r1) ioctl$int_in(r1, 0x5421, &(0x7f0000000840)=0x9) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000880)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000a80)=0xe8) r4 = getegid() fchown(r2, r3, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) clock_gettime(0x0, &(0x7f0000005100)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000004f40)=[{{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000001e80)=""/104, 0x68}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/31, 0x1f}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/104, 0x68}], 0x5, &(0x7f0000004040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000004100)=@abs, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000004180)=""/42, 0x2a}], 0x1, &(0x7f0000004200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000004300), 0x6e, &(0x7f0000004500)=[{&(0x7f0000004380)=""/183, 0xb7}, {&(0x7f0000004440)}, {&(0x7f0000004480)=""/106, 0x6a}], 0x3, &(0x7f0000004540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004580)=@abs, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004600)}, {&(0x7f0000004640)=""/71, 0x47}], 0x2}}, {{&(0x7f0000004700), 0x6e, &(0x7f0000004a40)=[{&(0x7f0000004780)=""/97, 0x61}, {&(0x7f0000004800)=""/148, 0x94}, {&(0x7f00000048c0)=""/187, 0xbb}, {&(0x7f0000004980)=""/7, 0x7}, {&(0x7f00000049c0)=""/70, 0x46}], 0x5, &(0x7f0000004ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004c00)=""/120, 0x78}, {&(0x7f0000004c80)=""/193, 0xc1}, {&(0x7f0000004d80)=""/211, 0xd3}], 0x3, &(0x7f0000004ec0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x7, 0x0, &(0x7f0000005140)={r6, r7+10000000}) statx(r0, &(0x7f0000005180)='./file0/file0\x00', 0x1000, 0x800, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000bc0)='./file0/file0\x00', &(0x7f0000000c00)='system.posix_acl_access\x00', &(0x7f00000052c0)={{}, {0x1, 0x2}, [{0x2, 0x0, r8}, {0x2, 0x0, r3}], {0x4, 0x2}, [{0x8, 0x0, r11}, {0x8, 0x5, 0xffffffffffffffff}], {}, {0x20, 0x1}}, 0x44, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000005340)={{0x1, 0x1, 0x18, r10}, './file0/file0\x00'}) [ 83.473115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.475440] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.476974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.482642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.487593] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.491254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.500231] Bluetooth: hci0: HCI_REQ-0x0c1a [ 83.521080] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.523177] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.524597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.527351] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.529214] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.531230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.536702] Bluetooth: hci1: HCI_REQ-0x0c1a [ 83.592492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.593994] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.596900] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.598857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.599965] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.601061] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.616084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.616749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.617846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.623252] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.625069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.625748] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.626914] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 83.627918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.633093] Bluetooth: hci4: HCI_REQ-0x0c1a [ 83.646052] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.657949] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.660646] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.661845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.667288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.676927] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.682247] Bluetooth: hci3: HCI_REQ-0x0c1a [ 83.686150] Bluetooth: hci2: HCI_REQ-0x0c1a [ 83.728299] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.738372] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.750214] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 83.754137] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 83.771530] Bluetooth: hci5: HCI_REQ-0x0c1a [ 83.818728] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 83.820727] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 83.828333] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 83.836269] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 83.837649] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 83.838921] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.869993] Bluetooth: hci7: HCI_REQ-0x0c1a [ 85.557660] Bluetooth: hci1: command 0x0409 tx timeout [ 85.559039] Bluetooth: hci0: command 0x0409 tx timeout [ 85.685084] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 85.686070] Bluetooth: hci4: command 0x0409 tx timeout [ 85.749059] Bluetooth: hci3: command 0x0409 tx timeout [ 85.749299] Bluetooth: hci2: command 0x0409 tx timeout [ 85.813139] Bluetooth: hci5: command 0x0409 tx timeout [ 85.942048] Bluetooth: hci7: command 0x0409 tx timeout [ 87.606127] Bluetooth: hci0: command 0x041b tx timeout [ 87.607098] Bluetooth: hci1: command 0x041b tx timeout [ 87.734058] Bluetooth: hci4: command 0x041b tx timeout [ 87.797101] Bluetooth: hci2: command 0x041b tx timeout [ 87.797566] Bluetooth: hci3: command 0x041b tx timeout [ 87.862050] Bluetooth: hci5: command 0x041b tx timeout [ 87.989103] Bluetooth: hci7: command 0x041b tx timeout [ 89.653092] Bluetooth: hci1: command 0x040f tx timeout [ 89.653983] Bluetooth: hci0: command 0x040f tx timeout [ 89.782043] Bluetooth: hci4: command 0x040f tx timeout [ 89.845190] Bluetooth: hci3: command 0x040f tx timeout [ 89.845793] Bluetooth: hci2: command 0x040f tx timeout [ 89.909081] Bluetooth: hci5: command 0x040f tx timeout [ 90.038058] Bluetooth: hci7: command 0x040f tx timeout [ 90.806062] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 91.702076] Bluetooth: hci0: command 0x0419 tx timeout [ 91.702977] Bluetooth: hci1: command 0x0419 tx timeout [ 91.829060] Bluetooth: hci4: command 0x0419 tx timeout [ 91.894037] Bluetooth: hci2: command 0x0419 tx timeout [ 91.894481] Bluetooth: hci3: command 0x0419 tx timeout [ 91.958082] Bluetooth: hci5: command 0x0419 tx timeout [ 92.086136] Bluetooth: hci7: command 0x0419 tx timeout [ 95.734104] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 98.537794] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.546506] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.551607] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.565295] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.569246] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.574298] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 98.590332] Bluetooth: hci6: HCI_REQ-0x0c1a [ 100.662048] Bluetooth: hci6: command 0x0409 tx timeout [ 102.709051] Bluetooth: hci6: command 0x041b tx timeout [ 104.757092] Bluetooth: hci6: command 0x040f tx timeout [ 106.805051] Bluetooth: hci6: command 0x0419 tx timeout [ 134.500170] loop2: detected capacity change from 0 to 2 [ 134.561710] loop2: detected capacity change from 0 to 2 19:19:11 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@rand_addr=0x64010102, 0x4e21, 0x1f, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3b, 0x0, 0xee01}, {0x1, 0x1ff, 0x4, 0x41bb, 0xe309, 0x6, 0x10001, 0x4}, {0x2bba, 0x100000000, 0x9, 0x7}, 0x1f, 0x6e6bbe, 0x0, 0x0, 0x3, 0x2}, {{@in=@empty, 0x4d5, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3505, 0x0, 0x0, 0x20, 0x3, 0x2, 0x1000}}, 0xe8) r1 = dup2(0xffffffffffffffff, r0) r2 = open(&(0x7f0000000140)='./file0/file0\x00', 0x40000, 0xa0) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000180)={0x6c, 0x3, 0x5, 0x10000}) r3 = eventfd2(0x5, 0x1) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000200)=r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000002800)={{0x1, 0x1, 0x18, r0, {0xc1d}}, './file0/file0\x00'}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002840), 0x1, 0x0) sendfile(r5, r6, &(0x7f0000002880)=0x18, 0x9) stat(&(0x7f00000028c0)='./file0/file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) inotify_add_watch(r0, &(0x7f0000002980)='./file0/file0\x00', 0x800) write(r6, &(0x7f00000029c0)="338c208bbf3aa90d7d3b77c78454c39696c894ec08617fe603b0c426d2d11777576dd893defbb6c53f0ff5a55be7e48569d69d69fbb79876d81967a88fcfea0232f1809032e6f8bdc6048ba604c93e33a72496f330661bb601e64b7d7ae0fc712109150861cb926cda8ef2748c0e00347727d7dd3cde9f92", 0x78) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000002a40)) sendfile(r3, r0, &(0x7f0000002a80)=0x526d, 0x1) mount$9p_unix(&(0x7f0000002ac0)='./file0/file0\x00', &(0x7f0000002b00)='./file0/file0\x00', &(0x7f0000002b40), 0x904004, &(0x7f0000002b80)={'trans=unix,', {[{@access_client}, {@privport}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@debug={'debug', 0x3d, 0x4}}, {@posixacl}, {@cache_none}], [{@smackfsroot}]}}) recvfrom$inet6(r0, &(0x7f0000002c00)=""/86, 0x56, 0x20, &(0x7f0000002c80)={0xa, 0x4e22, 0x6cb, @empty}, 0x1c) syz_mount_image$vfat(&(0x7f0000002cc0), &(0x7f0000002d00)='./file0\x00', 0x400, 0x3, &(0x7f0000002f00)=[{&(0x7f0000002d40)="9499a263b7ff93b4caa21c94f8bbde5e76457ad69a2f747bb93669fde68758dd18509275c8e0c0e171cf0513829b648be75df1102e178b1577731be0b7c2742989", 0x41}, {&(0x7f0000002dc0)="abfddb8a58d9fe7a708b7d6d7cc2939ccfd49fb710a502593573d1cc14dcb6a986cea4f2bf6b7e65f3357749f7e4b644a6d80152a19c55b96bede1b197535d44c76f0c824fdb3f20a280e8d81d77b1ae316d714f8505353af89a29e1ff9f806beaf8bfd21e507491ebcb2343ffd755ce4d59c778b29438c3aed96f57e72dea83bd1bcc2b1eee585937dc26da888c108bb991c1dfecf087fbe019e7494b7daaef1f3a278e893bd2c0760683f6ecb37d7de6a93c73ccecf0c175be30ad6b1f2dc6611b741e8c0cd36a0256cc812bb60255f3", 0xd1, 0x9}, {&(0x7f0000002ec0)="be4bcbaea009d26316f73da67043cbe2769352e6c287161724876c7491d830b8725069738862a4aba036", 0x2a, 0x4}], 0x1000, &(0x7f0000002f80)={[{@uni_xlateno}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp737'}}], [{@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@euid_lt={'euid<', r7}}]}) pread64(r3, &(0x7f0000003000)=""/133, 0x85, 0x4) [ 134.738580] loop2: detected capacity change from 0 to 2 19:19:11 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@rand_addr=0x64010102, 0x4e21, 0x1f, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3b, 0x0, 0xee01}, {0x1, 0x1ff, 0x4, 0x41bb, 0xe309, 0x6, 0x10001, 0x4}, {0x2bba, 0x100000000, 0x9, 0x7}, 0x1f, 0x6e6bbe, 0x0, 0x0, 0x3, 0x2}, {{@in=@empty, 0x4d5, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3505, 0x0, 0x0, 0x20, 0x3, 0x2, 0x1000}}, 0xe8) r1 = dup2(0xffffffffffffffff, r0) r2 = open(&(0x7f0000000140)='./file0/file0\x00', 0x40000, 0xa0) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000180)={0x6c, 0x3, 0x5, 0x10000}) r3 = eventfd2(0x5, 0x1) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000200)=r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000002800)={{0x1, 0x1, 0x18, r0, {0xc1d}}, './file0/file0\x00'}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002840), 0x1, 0x0) sendfile(r5, r6, &(0x7f0000002880)=0x18, 0x9) stat(&(0x7f00000028c0)='./file0/file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) inotify_add_watch(r0, &(0x7f0000002980)='./file0/file0\x00', 0x800) write(r6, &(0x7f00000029c0)="338c208bbf3aa90d7d3b77c78454c39696c894ec08617fe603b0c426d2d11777576dd893defbb6c53f0ff5a55be7e48569d69d69fbb79876d81967a88fcfea0232f1809032e6f8bdc6048ba604c93e33a72496f330661bb601e64b7d7ae0fc712109150861cb926cda8ef2748c0e00347727d7dd3cde9f92", 0x78) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000002a40)) sendfile(r3, r0, &(0x7f0000002a80)=0x526d, 0x1) mount$9p_unix(&(0x7f0000002ac0)='./file0/file0\x00', &(0x7f0000002b00)='./file0/file0\x00', &(0x7f0000002b40), 0x904004, &(0x7f0000002b80)={'trans=unix,', {[{@access_client}, {@privport}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@debug={'debug', 0x3d, 0x4}}, {@posixacl}, {@cache_none}], [{@smackfsroot}]}}) recvfrom$inet6(r0, &(0x7f0000002c00)=""/86, 0x56, 0x20, &(0x7f0000002c80)={0xa, 0x4e22, 0x6cb, @empty}, 0x1c) syz_mount_image$vfat(&(0x7f0000002cc0), &(0x7f0000002d00)='./file0\x00', 0x400, 0x3, &(0x7f0000002f00)=[{&(0x7f0000002d40)="9499a263b7ff93b4caa21c94f8bbde5e76457ad69a2f747bb93669fde68758dd18509275c8e0c0e171cf0513829b648be75df1102e178b1577731be0b7c2742989", 0x41}, {&(0x7f0000002dc0)="abfddb8a58d9fe7a708b7d6d7cc2939ccfd49fb710a502593573d1cc14dcb6a986cea4f2bf6b7e65f3357749f7e4b644a6d80152a19c55b96bede1b197535d44c76f0c824fdb3f20a280e8d81d77b1ae316d714f8505353af89a29e1ff9f806beaf8bfd21e507491ebcb2343ffd755ce4d59c778b29438c3aed96f57e72dea83bd1bcc2b1eee585937dc26da888c108bb991c1dfecf087fbe019e7494b7daaef1f3a278e893bd2c0760683f6ecb37d7de6a93c73ccecf0c175be30ad6b1f2dc6611b741e8c0cd36a0256cc812bb60255f3", 0xd1, 0x9}, {&(0x7f0000002ec0)="be4bcbaea009d26316f73da67043cbe2769352e6c287161724876c7491d830b8725069738862a4aba036", 0x2a, 0x4}], 0x1000, &(0x7f0000002f80)={[{@uni_xlateno}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp737'}}], [{@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@euid_lt={'euid<', r7}}]}) pread64(r3, &(0x7f0000003000)=""/133, 0x85, 0x4) [ 134.949619] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 134.973644] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 134.981664] loop2: detected capacity change from 0 to 2 19:19:32 executing program 6: r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$^!\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="0c9ab47df838e8cd354b828556ede4b167500d4084580862c7eb3ec3e6eeb2292b1dd882c92a6995c1701ab317387930c32ce846e01ab122ec7599e7a9b2f5da4cb459ebfc2b609d32e70a2a5f30f300d23dabe3ef7aba4eab73c6fa2951f633a4b8e6909057cc079839f913490377a48d3065ca8a93a245beea299de2ae0ad8130489929586d47bac46e6d3d7df5ffebd02d53948aa7b8d5b96744c34049443e381beadd913a0d6694caacef24180fadcffc653bc9278", 0xb7, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="9b827a0cecd3ff4751c04b1ee03e39cd0a9eaa13dd036d06cdf761c725ed75af896b44", 0x23, 0x0) r4 = add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="e26ea843d25551ed6b78d04db7a2a46417d7363c1b987e8e56be83db1637be403cb1c0aec1cf7a006bb64ab6", 0x2c, r3) r5 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r2) r6 = request_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='big_key\x00', 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000540)='id_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="f527dec8971a7791fceceac2f0f019b910f27dbdce34e171701c57a2455198b053be3d00631657a2068a86c63ac2fed355547c4aae75855cda09be2c24da303c213adabda96238a94cf778d7f42fe26ab2f5d1a07ddbc84e65bb83e442d0a4c426669fb1c8e2d191ef7eb1fcf5e1093a19fdb753dd2178", 0x77, 0xfffffffffffffff8) r8 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "2478fba0d8e966e6823dae437092022c8045470084f9ae3420ec242e8079fea879dbb29925c952f109011017e7e44fd012a1f59fbf815014f952528128eac151", 0x2c}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r7, r5, r8, 0x0) r9 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r9, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x3}, r5) keyctl$link(0x8, r6, r8) keyctl$read(0xb, r8, &(0x7f0000000840)=""/52, 0x34) add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, r0) r10 = add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc3}, &(0x7f0000000980)={0x0, "66ca797f1e8e84147e9f05e8681d3b9920cd6f2047375576150ccf84407797bc66778c2caaa2bec2d9ee16142771024d34d4ac94aabffe5a429aa5f5a4de29be", 0x1f}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffa, r10, 0x1) r11 = request_key(&(0x7f0000000a00)='id_resolver\x00', &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)='\xafY%\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, r11, r10, 0x0) keyctl$unlink(0x9, r4, 0xffffffffffffffff) 19:19:32 executing program 0: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) umount2(&(0x7f0000000240)='./file0\x00', 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000340), 0x8, 0x80000) r2 = fspick(r1, &(0x7f0000000380)='./file0/file0\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000003c0)={0x3}) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x8, 0x3) openat(r1, &(0x7f00000004c0)='./file1\x00', 0x2, 0x1c4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2004, @fd=r2, 0x38ea, 0x0, 0x0, 0x1, 0x0, {0x2}}, 0x5) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_mount_image$iso9660(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x2, 0x2, &(0x7f0000000740)=[{&(0x7f0000000680)="c24d53b3f2e599de07e964f4983a52a704ca45801fcf17255919b61f78222127b37b", 0x22, 0x8}, {&(0x7f00000006c0)="8bcd9233d1e38e54cc43e80405660943d77da608b8ea51119e220768ad6c34ad8f1dab51f16a86972f8cc53fa3409e8fcdd12c071457f6af6557e9396119bc00b215c4ee3238", 0x46, 0x30}], 0x0, &(0x7f0000000780)={[{}], [{@uid_lt={'uid<', r3}}, {@fowner_lt={'fowner<', r3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000800)={@desc={0x1, 0x0, @desc3}}) ioctl$int_in(r1, 0x5421, &(0x7f0000000880)) recvfrom$unix(r1, &(0x7f00000008c0), 0x0, 0x4000c060, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) r5 = inotify_init1(0x800) lchown(&(0x7f0000000980)='./file1\x00', r3, r0) r6 = syz_open_dev$usbmon(&(0x7f00000009c0), 0x6, 0x2000) fcntl$setownex(r6, 0xf, &(0x7f0000000a00)={0x2}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000000a40)={0x1, 0x7, 0x1}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000003280)={r5, 0x7fffffff, 0x101, 0x16}) 19:19:32 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) fallocate(r1, 0x0, 0x0, 0x87ffffc) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/116, 0x74}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x40200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() rt_tgsigqueueinfo(r3, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x6}) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xd40, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp6\x00') r4 = dup3(r2, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x0, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x880) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) 19:19:32 executing program 5: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x334, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c0}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xeeb}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xccc2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x337}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x851}, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) getxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'btrfs.', ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, &(0x7f0000000600)=""/226, 0xe2) tee(r0, r0, 0x9, 0xa) mount$9p_xen(&(0x7f0000000700), &(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780), 0x8000, &(0x7f00000007c0)={'trans=xen,', {[{@cache_fscache}, {@nodevmap}], [{@measure}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, 'ib\x00'}}]}}) close(r1) ioctl$int_in(r1, 0x5421, &(0x7f0000000840)=0x9) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000880)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000a80)=0xe8) r4 = getegid() fchown(r2, r3, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) clock_gettime(0x0, &(0x7f0000005100)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000004f40)=[{{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000001e80)=""/104, 0x68}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/31, 0x1f}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/104, 0x68}], 0x5, &(0x7f0000004040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000004100)=@abs, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000004180)=""/42, 0x2a}], 0x1, &(0x7f0000004200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000004300), 0x6e, &(0x7f0000004500)=[{&(0x7f0000004380)=""/183, 0xb7}, {&(0x7f0000004440)}, {&(0x7f0000004480)=""/106, 0x6a}], 0x3, &(0x7f0000004540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004580)=@abs, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004600)}, {&(0x7f0000004640)=""/71, 0x47}], 0x2}}, {{&(0x7f0000004700), 0x6e, &(0x7f0000004a40)=[{&(0x7f0000004780)=""/97, 0x61}, {&(0x7f0000004800)=""/148, 0x94}, {&(0x7f00000048c0)=""/187, 0xbb}, {&(0x7f0000004980)=""/7, 0x7}, {&(0x7f00000049c0)=""/70, 0x46}], 0x5, &(0x7f0000004ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004c00)=""/120, 0x78}, {&(0x7f0000004c80)=""/193, 0xc1}, {&(0x7f0000004d80)=""/211, 0xd3}], 0x3, &(0x7f0000004ec0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x7, 0x0, &(0x7f0000005140)={r6, r7+10000000}) statx(r0, &(0x7f0000005180)='./file0/file0\x00', 0x1000, 0x800, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000bc0)='./file0/file0\x00', &(0x7f0000000c00)='system.posix_acl_access\x00', &(0x7f00000052c0)={{}, {0x1, 0x2}, [{0x2, 0x0, r8}, {0x2, 0x0, r3}], {0x4, 0x2}, [{0x8, 0x0, r11}, {0x8, 0x5, 0xffffffffffffffff}], {}, {0x20, 0x1}}, 0x44, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000005340)={{0x1, 0x1, 0x18, r10}, './file0/file0\x00'}) 19:19:32 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@rand_addr=0x64010102, 0x4e21, 0x1f, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3b, 0x0, 0xee01}, {0x1, 0x1ff, 0x4, 0x41bb, 0xe309, 0x6, 0x10001, 0x4}, {0x2bba, 0x100000000, 0x9, 0x7}, 0x1f, 0x6e6bbe, 0x0, 0x0, 0x3, 0x2}, {{@in=@empty, 0x4d5, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3505, 0x0, 0x0, 0x20, 0x3, 0x2, 0x1000}}, 0xe8) r1 = dup2(0xffffffffffffffff, r0) r2 = open(&(0x7f0000000140)='./file0/file0\x00', 0x40000, 0xa0) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000180)={0x6c, 0x3, 0x5, 0x10000}) r3 = eventfd2(0x5, 0x1) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000200)=r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000002800)={{0x1, 0x1, 0x18, r0, {0xc1d}}, './file0/file0\x00'}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002840), 0x1, 0x0) sendfile(r5, r6, &(0x7f0000002880)=0x18, 0x9) stat(&(0x7f00000028c0)='./file0/file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) inotify_add_watch(r0, &(0x7f0000002980)='./file0/file0\x00', 0x800) write(r6, &(0x7f00000029c0)="338c208bbf3aa90d7d3b77c78454c39696c894ec08617fe603b0c426d2d11777576dd893defbb6c53f0ff5a55be7e48569d69d69fbb79876d81967a88fcfea0232f1809032e6f8bdc6048ba604c93e33a72496f330661bb601e64b7d7ae0fc712109150861cb926cda8ef2748c0e00347727d7dd3cde9f92", 0x78) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000002a40)) sendfile(r3, r0, &(0x7f0000002a80)=0x526d, 0x1) mount$9p_unix(&(0x7f0000002ac0)='./file0/file0\x00', &(0x7f0000002b00)='./file0/file0\x00', &(0x7f0000002b40), 0x904004, &(0x7f0000002b80)={'trans=unix,', {[{@access_client}, {@privport}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@debug={'debug', 0x3d, 0x4}}, {@posixacl}, {@cache_none}], [{@smackfsroot}]}}) recvfrom$inet6(r0, &(0x7f0000002c00)=""/86, 0x56, 0x20, &(0x7f0000002c80)={0xa, 0x4e22, 0x6cb, @empty}, 0x1c) syz_mount_image$vfat(&(0x7f0000002cc0), &(0x7f0000002d00)='./file0\x00', 0x400, 0x3, &(0x7f0000002f00)=[{&(0x7f0000002d40)="9499a263b7ff93b4caa21c94f8bbde5e76457ad69a2f747bb93669fde68758dd18509275c8e0c0e171cf0513829b648be75df1102e178b1577731be0b7c2742989", 0x41}, {&(0x7f0000002dc0)="abfddb8a58d9fe7a708b7d6d7cc2939ccfd49fb710a502593573d1cc14dcb6a986cea4f2bf6b7e65f3357749f7e4b644a6d80152a19c55b96bede1b197535d44c76f0c824fdb3f20a280e8d81d77b1ae316d714f8505353af89a29e1ff9f806beaf8bfd21e507491ebcb2343ffd755ce4d59c778b29438c3aed96f57e72dea83bd1bcc2b1eee585937dc26da888c108bb991c1dfecf087fbe019e7494b7daaef1f3a278e893bd2c0760683f6ecb37d7de6a93c73ccecf0c175be30ad6b1f2dc6611b741e8c0cd36a0256cc812bb60255f3", 0xd1, 0x9}, {&(0x7f0000002ec0)="be4bcbaea009d26316f73da67043cbe2769352e6c287161724876c7491d830b8725069738862a4aba036", 0x2a, 0x4}], 0x1000, &(0x7f0000002f80)={[{@uni_xlateno}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp737'}}], [{@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@euid_lt={'euid<', r7}}]}) pread64(r3, &(0x7f0000003000)=""/133, 0x85, 0x4) 19:19:32 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="e2de8073f262c43abf96e8942d9b53be60b07cd24e1433174d99c3f79b58f0780bd6f21bed2686a37cd66f4faf471fa7fe6cb2036222", 0x36, 0x3, &(0x7f0000000080)={r0, r1+60000000}) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x3, 0x7fff, 0x3, 0x5, 0x40, 0xffffffff, 0x4eea}, &(0x7f0000000100)={0x7fffffff, 0x1bd, 0x192a, 0x8, 0x5, 0x2, 0x80, 0x96b7}, &(0x7f0000000140)={0x80000001, 0x6, 0x477d55bf, 0x9, 0x1f, 0xffffffff, 0x8, 0x7fff}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) futex(&(0x7f0000000240)=0x2, 0x2, 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)=0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/162, 0xa2}, {&(0x7f00000006c0)=""/84, 0x54}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/230, 0xe6}], 0x1, &(0x7f0000000900)=""/212, 0xd4}, 0x4}, {{&(0x7f0000000a00)=@can, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a80)=""/219, 0xdb}, {&(0x7f0000000b80)=""/115, 0x73}], 0x2, &(0x7f0000000c40)=""/186, 0xba}}, {{&(0x7f0000000d00)=@phonet, 0x80, &(0x7f0000003100)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/166, 0xa6}, {&(0x7f0000001e40)=""/193, 0xc1}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/134, 0x86}, {&(0x7f0000003000)=""/143, 0x8f}, {&(0x7f00000030c0)=""/39, 0x27}], 0x7}, 0x9}, {{&(0x7f0000003180)=@tipc=@id, 0x80, &(0x7f0000003300)=[{&(0x7f0000003200)=""/141, 0x8d}, {&(0x7f00000032c0)=""/29, 0x1d}], 0x2, &(0x7f0000003340)=""/228, 0xe4}, 0x40}, {{&(0x7f0000003440)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003500)=[{&(0x7f00000034c0)=""/23, 0x17}], 0x1, &(0x7f0000003540)=""/26, 0x1a}, 0xc1c}, {{&(0x7f0000003580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003600)=""/131, 0x83}, {&(0x7f00000036c0)=""/63, 0x3f}, {&(0x7f0000003700)=""/160, 0xa0}], 0x3, &(0x7f0000003800)=""/190, 0xbe}, 0x7}], 0x7, 0x0, &(0x7f0000003a80)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_mount_image$nfs4(&(0x7f0000003ac0), &(0x7f0000003b00)='./file0\x00', 0x8, 0x7, &(0x7f0000003e80)=[{&(0x7f0000003b40)="3f9bb8ef7ad8244d15bd2bccc7641614b7a27f14eaf2dcd052e5c8ece106194afc", 0x21, 0x1}, {&(0x7f0000003b80)="b73a6ce17e4b2cb75be0a20525cc0ca6276186719655ac971df148267ade4efdb8092d76b0c1de87e0cf2503fe965130492917ea5ee50c8fa6cd9d55ae6450193d19ac0075324573d084677d2143fc5a4fe5bc40acfb7ef5012d1e4cc196dc167faeebeee254da411caeb081eab680be2a666e12bfb680121be03e78a9fb23a8d6f0e6e8e4619f665a5e7261db8e1865edd21528789f7bcbc1c105276134e18fed831d677c750e65863a82c2b4e66a2fcfe5cabe6cb54bac", 0xb8, 0x3}, {&(0x7f0000003c40)="3ce5f03b0677d8c300ba7dcdd15111e9367277cd952f87d66863cfe3b0c4820064a6a077af3dc5e7520fc0908bb8e06cd1b3c9108914de2ff77f94be65415499141b8d6a45542ae2cd38052494b9a2fbc0bb99fe632d9c481f26e4144a46bdffde7d58e6660f010fc5bbde188f82289d88529578aee1071b5210f31131768663fde1fcec17a1671f91aad03162cdde270962cf", 0x93, 0x2}, {&(0x7f0000003d00)="cf40ec3b75302936756bc77a264053611bb599529a6fe4190b9c67fa8931916e84b7030ecc5873b17462442300245fdbb570a80c", 0x34, 0x8}, {&(0x7f0000003d40)="3a38fa157faf2564a8f7b9e44b773989fd4038be519d5f45331d569f6aa77391710d0dc84ef17c8977f35f9bbb03240d4b1b0cf12b8218da241c90c5c21d58cb57c9ff0a268295654d5e0d4340c4fc5123d4c1f4f0b4c1c7e30b50dc83a1", 0x5e, 0x3}, {&(0x7f0000003dc0)="80a9a712e50886e0", 0x8, 0x3}, {&(0x7f0000003e00)="52a7a2ce6d954e65985f2daad594ca273e77c4659aeec8e265e0786285217f4b3aaa333441cc3071a9c6f7444d64224e6073ce9368a776b2457e613f13f71cd2f49007fc235356b6e2aae9cd1ebab21c2085962a025a97de44ceb15ae67f1f317cd7d466b9471c588abde6021d26be5e45a9422f78", 0x75, 0x2}], 0xe0088, &(0x7f0000004040)={[{}, {}, {'^-'}, {'%}'}, {}, {}, {'+\xb7!\xeb#---&*\xf8.:'}, {'))@\xa9,^^f'}], [{@subj_role={'subj_role', 0x3d, '!\xb5$'}}, {@uid_lt={'uid<', r3}}, {@fowner_eq}, {@appraise_type}, {@fsname={'fsname', 0x3d, '&^!'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000004100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) epoll_pwait2(r4, &(0x7f0000004140)=[{}], 0x1, &(0x7f0000004180), &(0x7f00000041c0)={[0x4]}, 0x8) clock_gettime(0x0, &(0x7f0000004240)={0x0, 0x0}) futex(&(0x7f0000004200)=0x1, 0xd, 0x0, &(0x7f0000004280)={r5, r6+10000000}, &(0x7f00000042c0), 0x1) clock_gettime(0x6, &(0x7f0000004300)) futex(&(0x7f0000004340)=0x1, 0xa, 0x2, &(0x7f0000004380)={0x0, 0x3938700}, &(0x7f00000043c0), 0x0) io_getevents(0x0, 0xffffffff, 0x1, &(0x7f0000004400)=[{}], &(0x7f0000004440)={0x0, 0x989680}) clock_gettime(0x0, &(0x7f00000044c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000004480)={[0x100]}, 0x0, &(0x7f0000004500)={r7, r8+60000000}, 0x8) clock_gettime(0x0, &(0x7f0000004540)={0x0, 0x0}) nanosleep(&(0x7f0000004580)={r9, r10+60000000}, &(0x7f00000045c0)) clock_getres(0x3, &(0x7f0000004600)) io_pgetevents(0x0, 0x3f, 0x6, &(0x7f0000004680)=[{}, {}, {}, {}, {}, {}], &(0x7f0000004780), &(0x7f0000004800)={&(0x7f00000047c0)={[0x2]}, 0x8}) 19:19:32 executing program 3: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="e2de8073f262c43abf96e8942d9b53be60b07cd24e1433174d99c3f79b58f0780bd6f21bed2686a37cd66f4faf471fa7fe6cb2036222", 0x36, 0x3, &(0x7f0000000080)={r0, r1+60000000}) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x3, 0x7fff, 0x3, 0x5, 0x40, 0xffffffff, 0x4eea}, &(0x7f0000000100)={0x7fffffff, 0x1bd, 0x192a, 0x8, 0x5, 0x2, 0x80, 0x96b7}, &(0x7f0000000140)={0x80000001, 0x6, 0x477d55bf, 0x9, 0x1f, 0xffffffff, 0x8, 0x7fff}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) futex(&(0x7f0000000240)=0x2, 0x2, 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)=0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/162, 0xa2}, {&(0x7f00000006c0)=""/84, 0x54}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/230, 0xe6}], 0x1, &(0x7f0000000900)=""/212, 0xd4}, 0x4}, {{&(0x7f0000000a00)=@can, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a80)=""/219, 0xdb}, {&(0x7f0000000b80)=""/115, 0x73}], 0x2, &(0x7f0000000c40)=""/186, 0xba}}, {{&(0x7f0000000d00)=@phonet, 0x80, &(0x7f0000003100)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/166, 0xa6}, {&(0x7f0000001e40)=""/193, 0xc1}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/134, 0x86}, {&(0x7f0000003000)=""/143, 0x8f}, {&(0x7f00000030c0)=""/39, 0x27}], 0x7}, 0x9}, {{&(0x7f0000003180)=@tipc=@id, 0x80, &(0x7f0000003300)=[{&(0x7f0000003200)=""/141, 0x8d}, {&(0x7f00000032c0)=""/29, 0x1d}], 0x2, &(0x7f0000003340)=""/228, 0xe4}, 0x40}, {{&(0x7f0000003440)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003500)=[{&(0x7f00000034c0)=""/23, 0x17}], 0x1, &(0x7f0000003540)=""/26, 0x1a}, 0xc1c}, {{&(0x7f0000003580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003600)=""/131, 0x83}, {&(0x7f00000036c0)=""/63, 0x3f}, {&(0x7f0000003700)=""/160, 0xa0}], 0x3, &(0x7f0000003800)=""/190, 0xbe}, 0x7}], 0x7, 0x0, &(0x7f0000003a80)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_mount_image$nfs4(&(0x7f0000003ac0), &(0x7f0000003b00)='./file0\x00', 0x8, 0x7, &(0x7f0000003e80)=[{&(0x7f0000003b40)="3f9bb8ef7ad8244d15bd2bccc7641614b7a27f14eaf2dcd052e5c8ece106194afc", 0x21, 0x1}, {&(0x7f0000003b80)="b73a6ce17e4b2cb75be0a20525cc0ca6276186719655ac971df148267ade4efdb8092d76b0c1de87e0cf2503fe965130492917ea5ee50c8fa6cd9d55ae6450193d19ac0075324573d084677d2143fc5a4fe5bc40acfb7ef5012d1e4cc196dc167faeebeee254da411caeb081eab680be2a666e12bfb680121be03e78a9fb23a8d6f0e6e8e4619f665a5e7261db8e1865edd21528789f7bcbc1c105276134e18fed831d677c750e65863a82c2b4e66a2fcfe5cabe6cb54bac", 0xb8, 0x3}, {&(0x7f0000003c40)="3ce5f03b0677d8c300ba7dcdd15111e9367277cd952f87d66863cfe3b0c4820064a6a077af3dc5e7520fc0908bb8e06cd1b3c9108914de2ff77f94be65415499141b8d6a45542ae2cd38052494b9a2fbc0bb99fe632d9c481f26e4144a46bdffde7d58e6660f010fc5bbde188f82289d88529578aee1071b5210f31131768663fde1fcec17a1671f91aad03162cdde270962cf", 0x93, 0x2}, {&(0x7f0000003d00)="cf40ec3b75302936756bc77a264053611bb599529a6fe4190b9c67fa8931916e84b7030ecc5873b17462442300245fdbb570a80c", 0x34, 0x8}, {&(0x7f0000003d40)="3a38fa157faf2564a8f7b9e44b773989fd4038be519d5f45331d569f6aa77391710d0dc84ef17c8977f35f9bbb03240d4b1b0cf12b8218da241c90c5c21d58cb57c9ff0a268295654d5e0d4340c4fc5123d4c1f4f0b4c1c7e30b50dc83a1", 0x5e, 0x3}, {&(0x7f0000003dc0)="80a9a712e50886e0", 0x8, 0x3}, {&(0x7f0000003e00)="52a7a2ce6d954e65985f2daad594ca273e77c4659aeec8e265e0786285217f4b3aaa333441cc3071a9c6f7444d64224e6073ce9368a776b2457e613f13f71cd2f49007fc235356b6e2aae9cd1ebab21c2085962a025a97de44ceb15ae67f1f317cd7d466b9471c588abde6021d26be5e45a9422f78", 0x75, 0x2}], 0xe0088, &(0x7f0000004040)={[{}, {}, {'^-'}, {'%}'}, {}, {}, {'+\xb7!\xeb#---&*\xf8.:'}, {'))@\xa9,^^f'}], [{@subj_role={'subj_role', 0x3d, '!\xb5$'}}, {@uid_lt={'uid<', r3}}, {@fowner_eq}, {@appraise_type}, {@fsname={'fsname', 0x3d, '&^!'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000004100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) epoll_pwait2(r4, &(0x7f0000004140)=[{}], 0x1, &(0x7f0000004180), &(0x7f00000041c0)={[0x4]}, 0x8) clock_gettime(0x0, &(0x7f0000004240)={0x0, 0x0}) futex(&(0x7f0000004200)=0x1, 0xd, 0x0, &(0x7f0000004280)={r5, r6+10000000}, &(0x7f00000042c0), 0x1) clock_gettime(0x6, &(0x7f0000004300)) futex(&(0x7f0000004340)=0x1, 0xa, 0x2, &(0x7f0000004380)={0x0, 0x3938700}, &(0x7f00000043c0), 0x0) io_getevents(0x0, 0xffffffff, 0x1, &(0x7f0000004400)=[{}], &(0x7f0000004440)={0x0, 0x989680}) clock_gettime(0x0, &(0x7f00000044c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000004480)={[0x100]}, 0x0, &(0x7f0000004500)={r7, r8+60000000}, 0x8) clock_gettime(0x0, &(0x7f0000004540)={0x0, 0x0}) nanosleep(&(0x7f0000004580)={r9, r10+60000000}, &(0x7f00000045c0)) clock_getres(0x3, &(0x7f0000004600)) io_pgetevents(0x0, 0x3f, 0x6, &(0x7f0000004680)=[{}, {}, {}, {}, {}, {}], &(0x7f0000004780), &(0x7f0000004800)={&(0x7f00000047c0)={[0x2]}, 0x8}) 19:19:32 executing program 7: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x334, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c0}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xeeb}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xccc2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x337}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x851}, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) getxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'btrfs.', ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, &(0x7f0000000600)=""/226, 0xe2) tee(r0, r0, 0x9, 0xa) mount$9p_xen(&(0x7f0000000700), &(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780), 0x8000, &(0x7f00000007c0)={'trans=xen,', {[{@cache_fscache}, {@nodevmap}], [{@measure}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, 'ib\x00'}}]}}) close(r1) ioctl$int_in(r1, 0x5421, &(0x7f0000000840)=0x9) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000880)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000a80)=0xe8) r4 = getegid() fchown(r2, r3, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) clock_gettime(0x0, &(0x7f0000005100)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000004f40)=[{{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000001e80)=""/104, 0x68}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/31, 0x1f}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/104, 0x68}], 0x5, &(0x7f0000004040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000004100)=@abs, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000004180)=""/42, 0x2a}], 0x1, &(0x7f0000004200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000004300), 0x6e, &(0x7f0000004500)=[{&(0x7f0000004380)=""/183, 0xb7}, {&(0x7f0000004440)}, {&(0x7f0000004480)=""/106, 0x6a}], 0x3, &(0x7f0000004540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004580)=@abs, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004600)}, {&(0x7f0000004640)=""/71, 0x47}], 0x2}}, {{&(0x7f0000004700), 0x6e, &(0x7f0000004a40)=[{&(0x7f0000004780)=""/97, 0x61}, {&(0x7f0000004800)=""/148, 0x94}, {&(0x7f00000048c0)=""/187, 0xbb}, {&(0x7f0000004980)=""/7, 0x7}, {&(0x7f00000049c0)=""/70, 0x46}], 0x5, &(0x7f0000004ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004c00)=""/120, 0x78}, {&(0x7f0000004c80)=""/193, 0xc1}, {&(0x7f0000004d80)=""/211, 0xd3}], 0x3, &(0x7f0000004ec0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x7, 0x0, &(0x7f0000005140)={r6, r7+10000000}) statx(r0, &(0x7f0000005180)='./file0/file0\x00', 0x1000, 0x800, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000bc0)='./file0/file0\x00', &(0x7f0000000c00)='system.posix_acl_access\x00', &(0x7f00000052c0)={{}, {0x1, 0x2}, [{0x2, 0x0, r8}, {0x2, 0x0, r3}], {0x4, 0x2}, [{0x8, 0x0, r11}, {0x8, 0x5, 0xffffffffffffffff}], {}, {0x20, 0x1}}, 0x44, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000005340)={{0x1, 0x1, 0x18, r10}, './file0/file0\x00'}) [ 155.893420] audit: type=1400 audit(1663096772.319:7): avc: denied { open } for pid=3990 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 155.897351] audit: type=1400 audit(1663096772.319:8): avc: denied { kernel } for pid=3990 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 155.906012] ------------[ cut here ]------------ [ 155.906030] [ 155.906033] ====================================================== [ 155.906037] WARNING: possible circular locking dependency detected [ 155.906041] 6.0.0-rc5-next-20220913 #1 Not tainted [ 155.906047] ------------------------------------------------------ [ 155.906050] syz-executor.4/3992 is trying to acquire lock: [ 155.906057] ffffffff853fa878 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70 [ 155.906094] [ 155.906094] but task is already holding lock: [ 155.906097] ffff888008ac3020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 155.906126] [ 155.906126] which lock already depends on the new lock. [ 155.906126] [ 155.906129] [ 155.906129] the existing dependency chain (in reverse order) is: [ 155.906132] [ 155.906132] -> #3 (&ctx->lock){....}-{2:2}: [ 155.906146] _raw_spin_lock+0x2a/0x40 [ 155.906164] __perf_event_task_sched_out+0x53b/0x18d0 [ 155.906176] __schedule+0xedd/0x2470 [ 155.906186] schedule+0xda/0x1b0 [ 155.906195] exit_to_user_mode_prepare+0x114/0x1a0 [ 155.906216] syscall_exit_to_user_mode+0x19/0x40 [ 155.906234] do_syscall_64+0x48/0x90 [ 155.906248] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 155.906266] [ 155.906266] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 155.906280] _raw_spin_lock_nested+0x30/0x40 [ 155.906294] raw_spin_rq_lock_nested+0x1e/0x30 [ 155.906307] task_fork_fair+0x63/0x4d0 [ 155.906325] sched_cgroup_fork+0x3d0/0x540 [ 155.906339] copy_process+0x3f9e/0x6df0 [ 155.906349] kernel_clone+0xe7/0x890 [ 155.906359] user_mode_thread+0xad/0xf0 [ 155.906369] rest_init+0x24/0x250 [ 155.906385] arch_call_rest_init+0xf/0x14 [ 155.906406] start_kernel+0x4c1/0x4e6 [ 155.906423] secondary_startup_64_no_verify+0xe0/0xeb [ 155.906437] [ 155.906437] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 155.906451] _raw_spin_lock_irqsave+0x39/0x60 [ 155.906466] try_to_wake_up+0xab/0x1920 [ 155.906479] up+0x75/0xb0 [ 155.906490] __up_console_sem+0x6e/0x80 [ 155.906507] console_unlock+0x46a/0x590 [ 155.906523] vt_ioctl+0x2822/0x2ca0 [ 155.906536] tty_ioctl+0x7c4/0x1700 [ 155.906547] __x64_sys_ioctl+0x19a/0x210 [ 155.906563] do_syscall_64+0x3b/0x90 [ 155.906576] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 155.906593] [ 155.906593] -> #0 ((console_sem).lock){....}-{2:2}: [ 155.906606] __lock_acquire+0x2a02/0x5e70 [ 155.906623] lock_acquire+0x1a2/0x530 [ 155.906639] _raw_spin_lock_irqsave+0x39/0x60 [ 155.906654] down_trylock+0xe/0x70 [ 155.906666] __down_trylock_console_sem+0x3b/0xd0 [ 155.906683] vprintk_emit+0x16b/0x560 [ 155.906699] vprintk+0x84/0xa0 [ 155.906716] _printk+0xba/0xf1 [ 155.906734] report_bug.cold+0x72/0xab [ 155.906746] handle_bug+0x3c/0x70 [ 155.906759] exc_invalid_op+0x14/0x50 [ 155.906772] asm_exc_invalid_op+0x16/0x20 [ 155.906789] group_sched_out.part.0+0x2c7/0x460 [ 155.906799] ctx_sched_out+0x8f1/0xc10 [ 155.906809] __perf_event_task_sched_out+0x6d0/0x18d0 [ 155.906821] __schedule+0xedd/0x2470 [ 155.906830] schedule+0xda/0x1b0 [ 155.906840] exit_to_user_mode_prepare+0x114/0x1a0 [ 155.906859] syscall_exit_to_user_mode+0x19/0x40 [ 155.906876] do_syscall_64+0x48/0x90 [ 155.906889] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 155.906906] [ 155.906906] other info that might help us debug this: [ 155.906906] [ 155.906909] Chain exists of: [ 155.906909] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 155.906909] [ 155.906924] Possible unsafe locking scenario: [ 155.906924] [ 155.906926] CPU0 CPU1 [ 155.906928] ---- ---- [ 155.906931] lock(&ctx->lock); [ 155.906936] lock(&rq->__lock); [ 155.906943] lock(&ctx->lock); [ 155.906949] lock((console_sem).lock); [ 155.906955] [ 155.906955] *** DEADLOCK *** [ 155.906955] [ 155.906957] 2 locks held by syz-executor.4/3992: [ 155.906964] #0: ffff88806ce37cd8 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 155.906989] #1: ffff888008ac3020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0 [ 155.907016] [ 155.907016] stack backtrace: [ 155.907019] CPU: 0 PID: 3992 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220913 #1 [ 155.907032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 155.907041] Call Trace: [ 155.907044] [ 155.907048] dump_stack_lvl+0x8b/0xb3 [ 155.907062] check_noncircular+0x263/0x2e0 [ 155.907079] ? format_decode+0x26c/0xb50 [ 155.907094] ? print_circular_bug+0x450/0x450 [ 155.907112] ? enable_ptr_key_workfn+0x20/0x20 [ 155.907127] ? format_decode+0x26c/0xb50 [ 155.907142] ? alloc_chain_hlocks+0x1ec/0x5a0 [ 155.907160] __lock_acquire+0x2a02/0x5e70 [ 155.907182] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 155.907204] lock_acquire+0x1a2/0x530 [ 155.907221] ? down_trylock+0xe/0x70 [ 155.907236] ? rcu_read_unlock+0x40/0x40 [ 155.907257] ? vprintk+0x84/0xa0 [ 155.907275] _raw_spin_lock_irqsave+0x39/0x60 [ 155.907291] ? down_trylock+0xe/0x70 [ 155.907304] down_trylock+0xe/0x70 [ 155.907318] ? vprintk+0x84/0xa0 [ 155.907335] __down_trylock_console_sem+0x3b/0xd0 [ 155.907353] vprintk_emit+0x16b/0x560 [ 155.907372] vprintk+0x84/0xa0 [ 155.907390] _printk+0xba/0xf1 [ 155.907408] ? record_print_text.cold+0x16/0x16 [ 155.907430] ? report_bug.cold+0x66/0xab [ 155.907444] ? group_sched_out.part.0+0x2c7/0x460 [ 155.907455] report_bug.cold+0x72/0xab [ 155.907470] handle_bug+0x3c/0x70 [ 155.907484] exc_invalid_op+0x14/0x50 [ 155.907498] asm_exc_invalid_op+0x16/0x20 [ 155.907516] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 155.907529] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 155.907541] RSP: 0018:ffff888042c27c48 EFLAGS: 00010006 [ 155.907550] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 155.907557] RDX: ffff888042b38000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 155.907565] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 155.907573] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff888008ac3000 [ 155.907581] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 155.907592] ? group_sched_out.part.0+0x2c7/0x460 [ 155.907605] ? group_sched_out.part.0+0x2c7/0x460 [ 155.907618] ctx_sched_out+0x8f1/0xc10 [ 155.907630] __perf_event_task_sched_out+0x6d0/0x18d0 [ 155.907646] ? lock_is_held_type+0xd7/0x130 [ 155.907665] ? __perf_cgroup_move+0x160/0x160 [ 155.907676] ? set_next_entity+0x304/0x550 [ 155.907694] ? update_curr+0x267/0x740 [ 155.907713] ? lock_is_held_type+0xd7/0x130 [ 155.907732] __schedule+0xedd/0x2470 [ 155.907745] ? io_schedule_timeout+0x150/0x150 [ 155.907775] ? rcu_read_lock_sched_held+0x3e/0x80 [ 155.907798] schedule+0xda/0x1b0 [ 155.907809] exit_to_user_mode_prepare+0x114/0x1a0 [ 155.907830] syscall_exit_to_user_mode+0x19/0x40 [ 155.907848] do_syscall_64+0x48/0x90 [ 155.907862] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 155.907880] RIP: 0033:0x7f01890c8b19 [ 155.907888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 155.907900] RSP: 002b:00007f018663e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.907910] RAX: 0000000000000001 RBX: 00007f01891dbf68 RCX: 00007f01890c8b19 [ 155.907918] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f01891dbf6c [ 155.907925] RBP: 00007f01891dbf60 R08: 000000000000000e R09: 0000000000000000 [ 155.907933] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f01891dbf6c [ 155.907940] R13: 00007fff1682bedf R14: 00007f018663e300 R15: 0000000000022000 [ 155.907953] [ 155.926777] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 155.926888] WARNING: CPU: 0 PID: 3992 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460 [ 155.961483] Modules linked in: [ 155.961723] CPU: 0 PID: 3992 Comm: syz-executor.4 Not tainted 6.0.0-rc5-next-20220913 #1 [ 155.962322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 155.963133] RIP: 0010:group_sched_out.part.0+0x2c7/0x460 [ 155.963532] Code: 5e 41 5f e9 3b b7 ef ff e8 36 b7 ef ff 65 8b 1d ab 15 ac 7e 31 ff 89 de e8 d6 b3 ef ff 85 db 0f 84 8a 00 00 00 e8 19 b7 ef ff <0f> 0b e9 a5 fe ff ff e8 0d b7 ef ff 48 8d 7d 10 48 b8 00 00 00 00 [ 155.964809] RSP: 0018:ffff888042c27c48 EFLAGS: 00010006 [ 155.965185] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000 [ 155.965683] RDX: ffff888042b38000 RSI: ffffffff81566027 RDI: 0000000000000005 [ 155.966181] RBP: ffff888008660000 R08: 0000000000000005 R09: 0000000000000001 [ 155.966677] R10: 0000000000000000 R11: ffffffff865aa01b R12: ffff888008ac3000 [ 155.967192] R13: ffff88806ce3d100 R14: ffffffff8547c660 R15: 0000000000000002 [ 155.967718] FS: 00007f018663e700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 155.968320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.968748] CR2: 0000001b2da26000 CR3: 00000000414cc000 CR4: 0000000000350ef0 [ 155.969275] Call Trace: [ 155.969468] [ 155.969641] ctx_sched_out+0x8f1/0xc10 [ 155.969938] __perf_event_task_sched_out+0x6d0/0x18d0 [ 155.970343] ? lock_is_held_type+0xd7/0x130 [ 155.970677] ? __perf_cgroup_move+0x160/0x160 [ 155.971013] ? set_next_entity+0x304/0x550 [ 155.971338] ? update_curr+0x267/0x740 [ 155.971642] ? lock_is_held_type+0xd7/0x130 [ 155.971988] __schedule+0xedd/0x2470 [ 155.972285] ? io_schedule_timeout+0x150/0x150 [ 155.972630] ? rcu_read_lock_sched_held+0x3e/0x80 [ 155.973001] schedule+0xda/0x1b0 [ 155.973265] exit_to_user_mode_prepare+0x114/0x1a0 [ 155.973636] syscall_exit_to_user_mode+0x19/0x40 [ 155.973993] do_syscall_64+0x48/0x90 [ 155.974278] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 155.974666] RIP: 0033:0x7f01890c8b19 [ 155.974944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 155.976291] RSP: 002b:00007f018663e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 155.976846] RAX: 0000000000000001 RBX: 00007f01891dbf68 RCX: 00007f01890c8b19 [ 155.977362] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f01891dbf6c [ 155.977891] RBP: 00007f01891dbf60 R08: 000000000000000e R09: 0000000000000000 [ 155.978428] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f01891dbf6c [ 155.978961] R13: 00007fff1682bedf R14: 00007f018663e300 R15: 0000000000022000 [ 155.979497] [ 155.979674] irq event stamp: 708 [ 155.979937] hardirqs last enabled at (707): [] exit_to_user_mode_prepare+0x109/0x1a0 [ 155.980638] hardirqs last disabled at (708): [] __schedule+0x1225/0x2470 [ 155.981237] softirqs last enabled at (466): [] __irq_exit_rcu+0x11b/0x180 [ 155.981867] softirqs last disabled at (457): [] __irq_exit_rcu+0x11b/0x180 [ 155.982505] ---[ end trace 0000000000000000 ]--- [ 155.988363] loop2: detected capacity change from 0 to 2 19:19:32 executing program 5: r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$^!\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="0c9ab47df838e8cd354b828556ede4b167500d4084580862c7eb3ec3e6eeb2292b1dd882c92a6995c1701ab317387930c32ce846e01ab122ec7599e7a9b2f5da4cb459ebfc2b609d32e70a2a5f30f300d23dabe3ef7aba4eab73c6fa2951f633a4b8e6909057cc079839f913490377a48d3065ca8a93a245beea299de2ae0ad8130489929586d47bac46e6d3d7df5ffebd02d53948aa7b8d5b96744c34049443e381beadd913a0d6694caacef24180fadcffc653bc9278", 0xb7, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="9b827a0cecd3ff4751c04b1ee03e39cd0a9eaa13dd036d06cdf761c725ed75af896b44", 0x23, 0x0) r4 = add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="e26ea843d25551ed6b78d04db7a2a46417d7363c1b987e8e56be83db1637be403cb1c0aec1cf7a006bb64ab6", 0x2c, r3) r5 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r2) r6 = request_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='big_key\x00', 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000540)='id_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="f527dec8971a7791fceceac2f0f019b910f27dbdce34e171701c57a2455198b053be3d00631657a2068a86c63ac2fed355547c4aae75855cda09be2c24da303c213adabda96238a94cf778d7f42fe26ab2f5d1a07ddbc84e65bb83e442d0a4c426669fb1c8e2d191ef7eb1fcf5e1093a19fdb753dd2178", 0x77, 0xfffffffffffffff8) r8 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "2478fba0d8e966e6823dae437092022c8045470084f9ae3420ec242e8079fea879dbb29925c952f109011017e7e44fd012a1f59fbf815014f952528128eac151", 0x2c}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r7, r5, r8, 0x0) r9 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r9, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x3}, r5) keyctl$link(0x8, r6, r8) keyctl$read(0xb, r8, &(0x7f0000000840)=""/52, 0x34) add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, r0) r10 = add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc3}, &(0x7f0000000980)={0x0, "66ca797f1e8e84147e9f05e8681d3b9920cd6f2047375576150ccf84407797bc66778c2caaa2bec2d9ee16142771024d34d4ac94aabffe5a429aa5f5a4de29be", 0x1f}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffa, r10, 0x1) r11 = request_key(&(0x7f0000000a00)='id_resolver\x00', &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)='\xafY%\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, r11, r10, 0x0) keyctl$unlink(0x9, r4, 0xffffffffffffffff) 19:19:32 executing program 7: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x334, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c0}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xeeb}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xccc2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x337}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x851}, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) getxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'btrfs.', ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, &(0x7f0000000600)=""/226, 0xe2) tee(r0, r0, 0x9, 0xa) mount$9p_xen(&(0x7f0000000700), &(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780), 0x8000, &(0x7f00000007c0)={'trans=xen,', {[{@cache_fscache}, {@nodevmap}], [{@measure}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, 'ib\x00'}}]}}) close(r1) ioctl$int_in(r1, 0x5421, &(0x7f0000000840)=0x9) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000880)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000a80)=0xe8) r4 = getegid() fchown(r2, r3, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) clock_gettime(0x0, &(0x7f0000005100)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000004f40)=[{{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000001e80)=""/104, 0x68}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/31, 0x1f}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/104, 0x68}], 0x5, &(0x7f0000004040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000004100)=@abs, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000004180)=""/42, 0x2a}], 0x1, &(0x7f0000004200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000004300), 0x6e, &(0x7f0000004500)=[{&(0x7f0000004380)=""/183, 0xb7}, {&(0x7f0000004440)}, {&(0x7f0000004480)=""/106, 0x6a}], 0x3, &(0x7f0000004540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004580)=@abs, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004600)}, {&(0x7f0000004640)=""/71, 0x47}], 0x2}}, {{&(0x7f0000004700), 0x6e, &(0x7f0000004a40)=[{&(0x7f0000004780)=""/97, 0x61}, {&(0x7f0000004800)=""/148, 0x94}, {&(0x7f00000048c0)=""/187, 0xbb}, {&(0x7f0000004980)=""/7, 0x7}, {&(0x7f00000049c0)=""/70, 0x46}], 0x5, &(0x7f0000004ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004c00)=""/120, 0x78}, {&(0x7f0000004c80)=""/193, 0xc1}, {&(0x7f0000004d80)=""/211, 0xd3}], 0x3, &(0x7f0000004ec0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x7, 0x0, &(0x7f0000005140)={r6, r7+10000000}) statx(r0, &(0x7f0000005180)='./file0/file0\x00', 0x1000, 0x800, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000bc0)='./file0/file0\x00', &(0x7f0000000c00)='system.posix_acl_access\x00', &(0x7f00000052c0)={{}, {0x1, 0x2}, [{0x2, 0x0, r8}, {0x2, 0x0, r3}], {0x4, 0x2}, [{0x8, 0x0, r11}, {0x8, 0x5, 0xffffffffffffffff}], {}, {0x20, 0x1}}, 0x44, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000005340)={{0x1, 0x1, 0x18, r10}, './file0/file0\x00'}) 19:19:32 executing program 6: r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$^!\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="0c9ab47df838e8cd354b828556ede4b167500d4084580862c7eb3ec3e6eeb2292b1dd882c92a6995c1701ab317387930c32ce846e01ab122ec7599e7a9b2f5da4cb459ebfc2b609d32e70a2a5f30f300d23dabe3ef7aba4eab73c6fa2951f633a4b8e6909057cc079839f913490377a48d3065ca8a93a245beea299de2ae0ad8130489929586d47bac46e6d3d7df5ffebd02d53948aa7b8d5b96744c34049443e381beadd913a0d6694caacef24180fadcffc653bc9278", 0xb7, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="9b827a0cecd3ff4751c04b1ee03e39cd0a9eaa13dd036d06cdf761c725ed75af896b44", 0x23, 0x0) r4 = add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="e26ea843d25551ed6b78d04db7a2a46417d7363c1b987e8e56be83db1637be403cb1c0aec1cf7a006bb64ab6", 0x2c, r3) r5 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r2) r6 = request_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='big_key\x00', 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000540)='id_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="f527dec8971a7791fceceac2f0f019b910f27dbdce34e171701c57a2455198b053be3d00631657a2068a86c63ac2fed355547c4aae75855cda09be2c24da303c213adabda96238a94cf778d7f42fe26ab2f5d1a07ddbc84e65bb83e442d0a4c426669fb1c8e2d191ef7eb1fcf5e1093a19fdb753dd2178", 0x77, 0xfffffffffffffff8) r8 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "2478fba0d8e966e6823dae437092022c8045470084f9ae3420ec242e8079fea879dbb29925c952f109011017e7e44fd012a1f59fbf815014f952528128eac151", 0x2c}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r7, r5, r8, 0x0) r9 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r9, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x3}, r5) keyctl$link(0x8, r6, r8) keyctl$read(0xb, r8, &(0x7f0000000840)=""/52, 0x34) add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, r0) r10 = add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc3}, &(0x7f0000000980)={0x0, "66ca797f1e8e84147e9f05e8681d3b9920cd6f2047375576150ccf84407797bc66778c2caaa2bec2d9ee16142771024d34d4ac94aabffe5a429aa5f5a4de29be", 0x1f}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffa, r10, 0x1) r11 = request_key(&(0x7f0000000a00)='id_resolver\x00', &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)='\xafY%\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, r11, r10, 0x0) keyctl$unlink(0x9, r4, 0xffffffffffffffff) 19:19:32 executing program 7: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x334, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c0}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xeeb}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xccc2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x337}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x851}, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) getxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'btrfs.', ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, &(0x7f0000000600)=""/226, 0xe2) tee(r0, r0, 0x9, 0xa) mount$9p_xen(&(0x7f0000000700), &(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780), 0x8000, &(0x7f00000007c0)={'trans=xen,', {[{@cache_fscache}, {@nodevmap}], [{@measure}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, 'ib\x00'}}]}}) close(r1) ioctl$int_in(r1, 0x5421, &(0x7f0000000840)=0x9) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000880)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000a80)=0xe8) r4 = getegid() fchown(r2, r3, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) clock_gettime(0x0, &(0x7f0000005100)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000004f40)=[{{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000001e80)=""/104, 0x68}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/31, 0x1f}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/104, 0x68}], 0x5, &(0x7f0000004040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000004100)=@abs, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000004180)=""/42, 0x2a}], 0x1, &(0x7f0000004200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000004300), 0x6e, &(0x7f0000004500)=[{&(0x7f0000004380)=""/183, 0xb7}, {&(0x7f0000004440)}, {&(0x7f0000004480)=""/106, 0x6a}], 0x3, &(0x7f0000004540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004580)=@abs, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004600)}, {&(0x7f0000004640)=""/71, 0x47}], 0x2}}, {{&(0x7f0000004700), 0x6e, &(0x7f0000004a40)=[{&(0x7f0000004780)=""/97, 0x61}, {&(0x7f0000004800)=""/148, 0x94}, {&(0x7f00000048c0)=""/187, 0xbb}, {&(0x7f0000004980)=""/7, 0x7}, {&(0x7f00000049c0)=""/70, 0x46}], 0x5, &(0x7f0000004ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004c00)=""/120, 0x78}, {&(0x7f0000004c80)=""/193, 0xc1}, {&(0x7f0000004d80)=""/211, 0xd3}], 0x3, &(0x7f0000004ec0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x7, 0x0, &(0x7f0000005140)={r6, r7+10000000}) statx(r0, &(0x7f0000005180)='./file0/file0\x00', 0x1000, 0x800, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000bc0)='./file0/file0\x00', &(0x7f0000000c00)='system.posix_acl_access\x00', &(0x7f00000052c0)={{}, {0x1, 0x2}, [{0x2, 0x0, r8}, {0x2, 0x0, r3}], {0x4, 0x2}, [{0x8, 0x0, r11}, {0x8, 0x5, 0xffffffffffffffff}], {}, {0x20, 0x1}}, 0x44, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r9, 0xc0189379, &(0x7f0000005340)={{0x1, 0x1, 0x18, r10}, './file0/file0\x00'}) 19:19:32 executing program 6: r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$^!\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="0c9ab47df838e8cd354b828556ede4b167500d4084580862c7eb3ec3e6eeb2292b1dd882c92a6995c1701ab317387930c32ce846e01ab122ec7599e7a9b2f5da4cb459ebfc2b609d32e70a2a5f30f300d23dabe3ef7aba4eab73c6fa2951f633a4b8e6909057cc079839f913490377a48d3065ca8a93a245beea299de2ae0ad8130489929586d47bac46e6d3d7df5ffebd02d53948aa7b8d5b96744c34049443e381beadd913a0d6694caacef24180fadcffc653bc9278", 0xb7, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="9b827a0cecd3ff4751c04b1ee03e39cd0a9eaa13dd036d06cdf761c725ed75af896b44", 0x23, 0x0) r4 = add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="e26ea843d25551ed6b78d04db7a2a46417d7363c1b987e8e56be83db1637be403cb1c0aec1cf7a006bb64ab6", 0x2c, r3) r5 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r2) r6 = request_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='big_key\x00', 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000540)='id_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="f527dec8971a7791fceceac2f0f019b910f27dbdce34e171701c57a2455198b053be3d00631657a2068a86c63ac2fed355547c4aae75855cda09be2c24da303c213adabda96238a94cf778d7f42fe26ab2f5d1a07ddbc84e65bb83e442d0a4c426669fb1c8e2d191ef7eb1fcf5e1093a19fdb753dd2178", 0x77, 0xfffffffffffffff8) r8 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "2478fba0d8e966e6823dae437092022c8045470084f9ae3420ec242e8079fea879dbb29925c952f109011017e7e44fd012a1f59fbf815014f952528128eac151", 0x2c}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r7, r5, r8, 0x0) r9 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r9, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x3}, r5) keyctl$link(0x8, r6, r8) keyctl$read(0xb, r8, &(0x7f0000000840)=""/52, 0x34) add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, r0) r10 = add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc3}, &(0x7f0000000980)={0x0, "66ca797f1e8e84147e9f05e8681d3b9920cd6f2047375576150ccf84407797bc66778c2caaa2bec2d9ee16142771024d34d4ac94aabffe5a429aa5f5a4de29be", 0x1f}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffa, r10, 0x1) r11 = request_key(&(0x7f0000000a00)='id_resolver\x00', &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)='\xafY%\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, r11, r10, 0x0) keyctl$unlink(0x9, r4, 0xffffffffffffffff) 19:19:32 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000007c0)=0xffffffffffffffff) read(r0, &(0x7f0000000080)=""/99, 0x63) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d2f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37343237383831383900"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001182de0168a747c9ad124fbfbfe191f2010040000c00000000000000d2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000003400000000000000", 0x20, 0x560}, {&(0x7f0000010300)="03000000040000000500000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d2f4655fd2f4655fd2f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d2f4655fd2f4655fd2f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1480}, {&(0x7f0000010e00)="8081000000300404d2f4655fd2f4655fd2f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x1700}, {&(0x7f0000010f00)="c041000000300000d2f4655fd2f4655fd2f4655f00000000000002002000000000000800000000000af301000400000000000000000000000c00000020000000", 0x40, 0x1900}, {&(0x7f00000004c0)="ed41000000040000d2f4655fd2f4655fd2f4655f00000000000002002000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000000d139fd6000000000000000000000000000000000000000000000000ed8100001a040000d2f4655fd2f4655fd2f4655f00000000000001002000000000000800010000000af301000400000000000000000000000200000060000000000000000000000000000000000000000000000000000000000000000000000000000000eade41a2000000000000000000000000000000000000000000000000ffa1000026000000d2f4655fd2f4655fd2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3734323738383138392f66696c65302f66696c6530000000000000000000000000000000000000000000004950d8d5000000000000000000000000000000000000000000000000ed8100000a000000d2f4655fd2f4655fd2f4655f00000000000001004000000000000800010000000af30100040000000000000000000000010000007000000000000000000000000000000000000000000000000000000000000000000000000000000099234b10800000000000000000000000000000000000000000000000ed81000028230000d2f4655fd2f4655fd2f4655f00000000000002002000000000000800010000000af30100040000000000000000000000090000009000000000000000000000000000000000000000000000000000000000000000000000000000000058b5ccc2000000000000000000000000000000000000000000000000ed81000064000000d2f4655fd2f4655fd2f4655f00000000000001002000000000000800010000000af3010004000000000000000000000001000000a00000000000000000000000000000000000000000000000000000000000000000000000000000008fe683ee00"/768, 0x300, 0x1980}, {&(0x7f0000011300)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011400)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x8000}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011600)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011700)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011800)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011900)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000000140)="0000000000040000000000000000ffffffff0000000000000000000000000000102012d89bc8488e2c9ea16e13ba24448d8a87ee85f0c99e2f4da083008f6a09a9987130860d06c2a1dde239a7fc9268d0fef9c501854d3fb8fa2b56a206db1bb7c5d9d3120fd7e19676626014ee1ff3fb643ad9447bb2773aed21ee50ea6a0a01ed7f278232ac0538bf607f0327f4b1fe0ea4c29f6c0e6f33d9961896ad06071788822d0161c438862f0a58388334472be64ad19c3d0f08cb02", 0xba, 0xa800}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0xac04}, {&(0x7f0000012000)="504d4d00504d4dffd2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012100)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166050766696c653100"/51, 0x33, 0x7fffffff}, {&(0x7f0000012200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x18000}, {&(0x7f0000012700)='syzkallers\x00'/32, 0x20, 0x1c000}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x20000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x203e0}, {&(0x7f0000012a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x28000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000100003e1d5d8240e8ff88"]) 19:19:32 executing program 6: r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$^!\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="0c9ab47df838e8cd354b828556ede4b167500d4084580862c7eb3ec3e6eeb2292b1dd882c92a6995c1701ab317387930c32ce846e01ab122ec7599e7a9b2f5da4cb459ebfc2b609d32e70a2a5f30f300d23dabe3ef7aba4eab73c6fa2951f633a4b8e6909057cc079839f913490377a48d3065ca8a93a245beea299de2ae0ad8130489929586d47bac46e6d3d7df5ffebd02d53948aa7b8d5b96744c34049443e381beadd913a0d6694caacef24180fadcffc653bc9278", 0xb7, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="9b827a0cecd3ff4751c04b1ee03e39cd0a9eaa13dd036d06cdf761c725ed75af896b44", 0x23, 0x0) add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="e26ea843d25551ed6b78d04db7a2a46417d7363c1b987e8e56be83db1637be403cb1c0aec1cf7a006bb64ab6", 0x2c, r3) r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r2) r5 = request_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='big_key\x00', 0xfffffffffffffffe) r6 = add_key(&(0x7f0000000540)='id_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="f527dec8971a7791fceceac2f0f019b910f27dbdce34e171701c57a2455198b053be3d00631657a2068a86c63ac2fed355547c4aae75855cda09be2c24da303c213adabda96238a94cf778d7f42fe26ab2f5d1a07ddbc84e65bb83e442d0a4c426669fb1c8e2d191ef7eb1fcf5e1093a19fdb753dd2178", 0x77, 0xfffffffffffffff8) r7 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "2478fba0d8e966e6823dae437092022c8045470084f9ae3420ec242e8079fea879dbb29925c952f109011017e7e44fd012a1f59fbf815014f952528128eac151", 0x2c}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r6, r4, r7, 0x0) r8 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r8, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x3}, r4) keyctl$link(0x8, r5, r7) keyctl$read(0xb, r7, &(0x7f0000000840)=""/52, 0x34) add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, r0) r9 = add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc3}, &(0x7f0000000980)={0x0, "66ca797f1e8e84147e9f05e8681d3b9920cd6f2047375576150ccf84407797bc66778c2caaa2bec2d9ee16142771024d34d4ac94aabffe5a429aa5f5a4de29be", 0x1f}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffa, r9, 0x1) r10 = request_key(&(0x7f0000000a00)='id_resolver\x00', &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)='\xafY%\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, r10, r9, 0x0) 19:19:32 executing program 7: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x334, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c0}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xeeb}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xccc2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x337}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x851}, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) getxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'btrfs.', ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, &(0x7f0000000600)=""/226, 0xe2) tee(r0, r0, 0x9, 0xa) mount$9p_xen(&(0x7f0000000700), &(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780), 0x8000, &(0x7f00000007c0)={'trans=xen,', {[{@cache_fscache}, {@nodevmap}], [{@measure}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, 'ib\x00'}}]}}) close(r1) ioctl$int_in(r1, 0x5421, &(0x7f0000000840)=0x9) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000880)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000a80)=0xe8) r4 = getegid() fchown(r2, r3, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) clock_gettime(0x0, &(0x7f0000005100)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000004f40)=[{{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000001e80)=""/104, 0x68}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/31, 0x1f}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/104, 0x68}], 0x5, &(0x7f0000004040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000004100)=@abs, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000004180)=""/42, 0x2a}], 0x1, &(0x7f0000004200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000004300), 0x6e, &(0x7f0000004500)=[{&(0x7f0000004380)=""/183, 0xb7}, {&(0x7f0000004440)}, {&(0x7f0000004480)=""/106, 0x6a}], 0x3, &(0x7f0000004540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004580)=@abs, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004600)}, {&(0x7f0000004640)=""/71, 0x47}], 0x2}}, {{&(0x7f0000004700), 0x6e, &(0x7f0000004a40)=[{&(0x7f0000004780)=""/97, 0x61}, {&(0x7f0000004800)=""/148, 0x94}, {&(0x7f00000048c0)=""/187, 0xbb}, {&(0x7f0000004980)=""/7, 0x7}, {&(0x7f00000049c0)=""/70, 0x46}], 0x5, &(0x7f0000004ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004c00)=""/120, 0x78}, {&(0x7f0000004c80)=""/193, 0xc1}, {&(0x7f0000004d80)=""/211, 0xd3}], 0x3, &(0x7f0000004ec0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x7, 0x0, &(0x7f0000005140)={r6, r7+10000000}) statx(r0, &(0x7f0000005180)='./file0/file0\x00', 0x1000, 0x800, &(0x7f00000051c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000bc0)='./file0/file0\x00', &(0x7f0000000c00)='system.posix_acl_access\x00', &(0x7f00000052c0)={{}, {0x1, 0x2}, [{0x2, 0x0, r8}, {0x2, 0x0, r3}], {0x4, 0x2}, [{0x8, 0x0, r9}, {0x8, 0x5, 0xffffffffffffffff}], {}, {0x20, 0x1}}, 0x44, 0x2) 19:19:32 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@rand_addr=0x64010102, 0x4e21, 0x1f, 0x4e23, 0x0, 0x2, 0x0, 0x80, 0x3b, 0x0, 0xee01}, {0x1, 0x1ff, 0x4, 0x41bb, 0xe309, 0x6, 0x10001, 0x4}, {0x2bba, 0x100000000, 0x9, 0x7}, 0x1f, 0x6e6bbe, 0x0, 0x0, 0x3, 0x2}, {{@in=@empty, 0x4d5, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3505, 0x0, 0x0, 0x20, 0x3, 0x2, 0x1000}}, 0xe8) r1 = dup2(0xffffffffffffffff, r0) r2 = open(&(0x7f0000000140)='./file0/file0\x00', 0x40000, 0xa0) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f0000000180)={0x6c, 0x3, 0x5, 0x10000}) r3 = eventfd2(0x5, 0x1) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000200)=r4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000002800)={{0x1, 0x1, 0x18, r0, {0xc1d}}, './file0/file0\x00'}) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002840), 0x1, 0x0) sendfile(r5, r6, &(0x7f0000002880)=0x18, 0x9) stat(&(0x7f00000028c0)='./file0/file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) inotify_add_watch(r0, &(0x7f0000002980)='./file0/file0\x00', 0x800) write(r6, &(0x7f00000029c0)="338c208bbf3aa90d7d3b77c78454c39696c894ec08617fe603b0c426d2d11777576dd893defbb6c53f0ff5a55be7e48569d69d69fbb79876d81967a88fcfea0232f1809032e6f8bdc6048ba604c93e33a72496f330661bb601e64b7d7ae0fc712109150861cb926cda8ef2748c0e00347727d7dd3cde9f92", 0x78) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000002a40)) sendfile(r3, r0, &(0x7f0000002a80)=0x526d, 0x1) mount$9p_unix(&(0x7f0000002ac0)='./file0/file0\x00', &(0x7f0000002b00)='./file0/file0\x00', &(0x7f0000002b40), 0x904004, &(0x7f0000002b80)={'trans=unix,', {[{@access_client}, {@privport}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@debug={'debug', 0x3d, 0x4}}, {@posixacl}, {@cache_none}], [{@smackfsroot}]}}) recvfrom$inet6(r0, &(0x7f0000002c00)=""/86, 0x56, 0x20, &(0x7f0000002c80)={0xa, 0x4e22, 0x6cb, @empty}, 0x1c) syz_mount_image$vfat(&(0x7f0000002cc0), &(0x7f0000002d00)='./file0\x00', 0x400, 0x3, &(0x7f0000002f00)=[{&(0x7f0000002d40)="9499a263b7ff93b4caa21c94f8bbde5e76457ad69a2f747bb93669fde68758dd18509275c8e0c0e171cf0513829b648be75df1102e178b1577731be0b7c2742989", 0x41}, {&(0x7f0000002dc0)="abfddb8a58d9fe7a708b7d6d7cc2939ccfd49fb710a502593573d1cc14dcb6a986cea4f2bf6b7e65f3357749f7e4b644a6d80152a19c55b96bede1b197535d44c76f0c824fdb3f20a280e8d81d77b1ae316d714f8505353af89a29e1ff9f806beaf8bfd21e507491ebcb2343ffd755ce4d59c778b29438c3aed96f57e72dea83bd1bcc2b1eee585937dc26da888c108bb991c1dfecf087fbe019e7494b7daaef1f3a278e893bd2c0760683f6ecb37d7de6a93c73ccecf0c175be30ad6b1f2dc6611b741e8c0cd36a0256cc812bb60255f3", 0xd1, 0x9}, {&(0x7f0000002ec0)="be4bcbaea009d26316f73da67043cbe2769352e6c287161724876c7491d830b8725069738862a4aba036", 0x2a, 0x4}], 0x1000, &(0x7f0000002f80)={[{@uni_xlateno}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp737'}}], [{@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@euid_lt={'euid<', r7}}]}) 19:19:32 executing program 6: r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$^!\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="0c9ab47df838e8cd354b828556ede4b167500d4084580862c7eb3ec3e6eeb2292b1dd882c92a6995c1701ab317387930c32ce846e01ab122ec7599e7a9b2f5da4cb459ebfc2b609d32e70a2a5f30f300d23dabe3ef7aba4eab73c6fa2951f633a4b8e6909057cc079839f913490377a48d3065ca8a93a245beea299de2ae0ad8130489929586d47bac46e6d3d7df5ffebd02d53948aa7b8d5b96744c34049443e381beadd913a0d6694caacef24180fadcffc653bc9278", 0xb7, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="9b827a0cecd3ff4751c04b1ee03e39cd0a9eaa13dd036d06cdf761c725ed75af896b44", 0x23, 0x0) add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="e26ea843d25551ed6b78d04db7a2a46417d7363c1b987e8e56be83db1637be403cb1c0aec1cf7a006bb64ab6", 0x2c, r3) r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r2) r5 = request_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='big_key\x00', 0xfffffffffffffffe) r6 = add_key(&(0x7f0000000540)='id_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="f527dec8971a7791fceceac2f0f019b910f27dbdce34e171701c57a2455198b053be3d00631657a2068a86c63ac2fed355547c4aae75855cda09be2c24da303c213adabda96238a94cf778d7f42fe26ab2f5d1a07ddbc84e65bb83e442d0a4c426669fb1c8e2d191ef7eb1fcf5e1093a19fdb753dd2178", 0x77, 0xfffffffffffffff8) r7 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "2478fba0d8e966e6823dae437092022c8045470084f9ae3420ec242e8079fea879dbb29925c952f109011017e7e44fd012a1f59fbf815014f952528128eac151", 0x2c}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r6, r4, r7, 0x0) r8 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r8, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x3}, r4) keyctl$link(0x8, r5, r7) keyctl$read(0xb, r7, &(0x7f0000000840)=""/52, 0x34) add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, r0) r9 = add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc3}, &(0x7f0000000980)={0x0, "66ca797f1e8e84147e9f05e8681d3b9920cd6f2047375576150ccf84407797bc66778c2caaa2bec2d9ee16142771024d34d4ac94aabffe5a429aa5f5a4de29be", 0x1f}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffa, r9, 0x1) request_key(&(0x7f0000000a00)='id_resolver\x00', &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)='\xafY%\x00', 0xfffffffffffffffc) [ 156.228778] loop0: detected capacity change from 0 to 264192 [ 156.233017] hrtimer: interrupt took 16801 ns [ 156.302173] loop2: detected capacity change from 0 to 2 [ 156.303578] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 156.310422] ext4 filesystem being mounted at /syzkaller-testdir601693304/syzkaller.3FI2aF/2/file0 supports timestamps until 2038 (0x7fffffff) 19:19:33 executing program 5: r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$^!\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="0c9ab47df838e8cd354b828556ede4b167500d4084580862c7eb3ec3e6eeb2292b1dd882c92a6995c1701ab317387930c32ce846e01ab122ec7599e7a9b2f5da4cb459ebfc2b609d32e70a2a5f30f300d23dabe3ef7aba4eab73c6fa2951f633a4b8e6909057cc079839f913490377a48d3065ca8a93a245beea299de2ae0ad8130489929586d47bac46e6d3d7df5ffebd02d53948aa7b8d5b96744c34049443e381beadd913a0d6694caacef24180fadcffc653bc9278", 0xb7, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="9b827a0cecd3ff4751c04b1ee03e39cd0a9eaa13dd036d06cdf761c725ed75af896b44", 0x23, 0x0) r4 = add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="e26ea843d25551ed6b78d04db7a2a46417d7363c1b987e8e56be83db1637be403cb1c0aec1cf7a006bb64ab6", 0x2c, r3) r5 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r2) r6 = request_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='big_key\x00', 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000540)='id_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="f527dec8971a7791fceceac2f0f019b910f27dbdce34e171701c57a2455198b053be3d00631657a2068a86c63ac2fed355547c4aae75855cda09be2c24da303c213adabda96238a94cf778d7f42fe26ab2f5d1a07ddbc84e65bb83e442d0a4c426669fb1c8e2d191ef7eb1fcf5e1093a19fdb753dd2178", 0x77, 0xfffffffffffffff8) r8 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "2478fba0d8e966e6823dae437092022c8045470084f9ae3420ec242e8079fea879dbb29925c952f109011017e7e44fd012a1f59fbf815014f952528128eac151", 0x2c}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r7, r5, r8, 0x0) r9 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r9, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x3}, r5) keyctl$link(0x8, r6, r8) keyctl$read(0xb, r8, &(0x7f0000000840)=""/52, 0x34) add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, r0) r10 = add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc3}, &(0x7f0000000980)={0x0, "66ca797f1e8e84147e9f05e8681d3b9920cd6f2047375576150ccf84407797bc66778c2caaa2bec2d9ee16142771024d34d4ac94aabffe5a429aa5f5a4de29be", 0x1f}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffa, r10, 0x1) r11 = request_key(&(0x7f0000000a00)='id_resolver\x00', &(0x7f0000000a40)={'syz', 0x0}, &(0x7f0000000a80)='\xafY%\x00', 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, r11, r10, 0x0) keyctl$unlink(0x9, r4, 0xffffffffffffffff) 19:19:33 executing program 6: r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='$^!\x00', 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="0c9ab47df838e8cd354b828556ede4b167500d4084580862c7eb3ec3e6eeb2292b1dd882c92a6995c1701ab317387930c32ce846e01ab122ec7599e7a9b2f5da4cb459ebfc2b609d32e70a2a5f30f300d23dabe3ef7aba4eab73c6fa2951f633a4b8e6909057cc079839f913490377a48d3065ca8a93a245beea299de2ae0ad8130489929586d47bac46e6d3d7df5ffebd02d53948aa7b8d5b96744c34049443e381beadd913a0d6694caacef24180fadcffc653bc9278", 0xb7, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="9b827a0cecd3ff4751c04b1ee03e39cd0a9eaa13dd036d06cdf761c725ed75af896b44", 0x23, 0x0) add_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="e26ea843d25551ed6b78d04db7a2a46417d7363c1b987e8e56be83db1637be403cb1c0aec1cf7a006bb64ab6", 0x2c, r3) r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, r2) r5 = request_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000500)='big_key\x00', 0xfffffffffffffffe) r6 = add_key(&(0x7f0000000540)='id_resolver\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="f527dec8971a7791fceceac2f0f019b910f27dbdce34e171701c57a2455198b053be3d00631657a2068a86c63ac2fed355547c4aae75855cda09be2c24da303c213adabda96238a94cf778d7f42fe26ab2f5d1a07ddbc84e65bb83e442d0a4c426669fb1c8e2d191ef7eb1fcf5e1093a19fdb753dd2178", 0x77, 0xfffffffffffffff8) r7 = add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc1}, &(0x7f00000006c0)={0x0, "2478fba0d8e966e6823dae437092022c8045470084f9ae3420ec242e8079fea879dbb29925c952f109011017e7e44fd012a1f59fbf815014f952528128eac151", 0x2c}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, r6, r4, r7, 0x0) r8 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r8, &(0x7f00000007c0)='trusted\x00', &(0x7f0000000800)={'syz', 0x3}, r4) keyctl$link(0x8, r5, r7) keyctl$read(0xb, r7, &(0x7f0000000840)=""/52, 0x34) add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, r0) r9 = add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc3}, &(0x7f0000000980)={0x0, "66ca797f1e8e84147e9f05e8681d3b9920cd6f2047375576150ccf84407797bc66778c2caaa2bec2d9ee16142771024d34d4ac94aabffe5a429aa5f5a4de29be", 0x1f}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffa, r9, 0x1) 19:19:33 executing program 3: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="e2de8073f262c43abf96e8942d9b53be60b07cd24e1433174d99c3f79b58f0780bd6f21bed2686a37cd66f4faf471fa7fe6cb2036222", 0x36, 0x3, &(0x7f0000000080)={r0, r1+60000000}) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x3, 0x7fff, 0x3, 0x5, 0x40, 0xffffffff, 0x4eea}, &(0x7f0000000100)={0x7fffffff, 0x1bd, 0x192a, 0x8, 0x5, 0x2, 0x80, 0x96b7}, &(0x7f0000000140)={0x80000001, 0x6, 0x477d55bf, 0x9, 0x1f, 0xffffffff, 0x8, 0x7fff}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) futex(&(0x7f0000000240)=0x2, 0x2, 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)=0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)=""/154, 0x9a}, {&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/162, 0xa2}, {&(0x7f00000006c0)=""/84, 0x54}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/230, 0xe6}], 0x1, &(0x7f0000000900)=""/212, 0xd4}, 0x4}, {{&(0x7f0000000a00)=@can, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a80)=""/219, 0xdb}, {&(0x7f0000000b80)=""/115, 0x73}], 0x2, &(0x7f0000000c40)=""/186, 0xba}}, {{&(0x7f0000000d00)=@phonet, 0x80, &(0x7f0000003100)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/166, 0xa6}, {&(0x7f0000001e40)=""/193, 0xc1}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/134, 0x86}, {&(0x7f0000003000)=""/143, 0x8f}, {&(0x7f00000030c0)=""/39, 0x27}], 0x7}, 0x9}, {{&(0x7f0000003180)=@tipc=@id, 0x80, &(0x7f0000003300)=[{&(0x7f0000003200)=""/141, 0x8d}, {&(0x7f00000032c0)=""/29, 0x1d}], 0x2, &(0x7f0000003340)=""/228, 0xe4}, 0x40}, {{&(0x7f0000003440)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003500)=[{&(0x7f00000034c0)=""/23, 0x17}], 0x1, &(0x7f0000003540)=""/26, 0x1a}, 0xc1c}, {{&(0x7f0000003580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003600)=""/131, 0x83}, {&(0x7f00000036c0)=""/63, 0x3f}, {&(0x7f0000003700)=""/160, 0xa0}], 0x3, &(0x7f0000003800)=""/190, 0xbe}, 0x7}], 0x7, 0x0, &(0x7f0000003a80)={0x0, 0x989680}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_mount_image$nfs4(&(0x7f0000003ac0), &(0x7f0000003b00)='./file0\x00', 0x8, 0x7, &(0x7f0000003e80)=[{&(0x7f0000003b40)="3f9bb8ef7ad8244d15bd2bccc7641614b7a27f14eaf2dcd052e5c8ece106194afc", 0x21, 0x1}, {&(0x7f0000003b80)="b73a6ce17e4b2cb75be0a20525cc0ca6276186719655ac971df148267ade4efdb8092d76b0c1de87e0cf2503fe965130492917ea5ee50c8fa6cd9d55ae6450193d19ac0075324573d084677d2143fc5a4fe5bc40acfb7ef5012d1e4cc196dc167faeebeee254da411caeb081eab680be2a666e12bfb680121be03e78a9fb23a8d6f0e6e8e4619f665a5e7261db8e1865edd21528789f7bcbc1c105276134e18fed831d677c750e65863a82c2b4e66a2fcfe5cabe6cb54bac", 0xb8, 0x3}, {&(0x7f0000003c40)="3ce5f03b0677d8c300ba7dcdd15111e9367277cd952f87d66863cfe3b0c4820064a6a077af3dc5e7520fc0908bb8e06cd1b3c9108914de2ff77f94be65415499141b8d6a45542ae2cd38052494b9a2fbc0bb99fe632d9c481f26e4144a46bdffde7d58e6660f010fc5bbde188f82289d88529578aee1071b5210f31131768663fde1fcec17a1671f91aad03162cdde270962cf", 0x93, 0x2}, {&(0x7f0000003d00)="cf40ec3b75302936756bc77a264053611bb599529a6fe4190b9c67fa8931916e84b7030ecc5873b17462442300245fdbb570a80c", 0x34, 0x8}, {&(0x7f0000003d40)="3a38fa157faf2564a8f7b9e44b773989fd4038be519d5f45331d569f6aa77391710d0dc84ef17c8977f35f9bbb03240d4b1b0cf12b8218da241c90c5c21d58cb57c9ff0a268295654d5e0d4340c4fc5123d4c1f4f0b4c1c7e30b50dc83a1", 0x5e, 0x3}, {&(0x7f0000003dc0)="80a9a712e50886e0", 0x8, 0x3}, {&(0x7f0000003e00)="52a7a2ce6d954e65985f2daad594ca273e77c4659aeec8e265e0786285217f4b3aaa333441cc3071a9c6f7444d64224e6073ce9368a776b2457e613f13f71cd2f49007fc235356b6e2aae9cd1ebab21c2085962a025a97de44ceb15ae67f1f317cd7d466b9471c588abde6021d26be5e45a9422f78", 0x75, 0x2}], 0xe0088, &(0x7f0000004040)={[{}, {}, {'^-'}, {'%}'}, {}, {}, {'+\xb7!\xeb#---&*\xf8.:'}, {'))@\xa9,^^f'}], [{@subj_role={'subj_role', 0x3d, '!\xb5$'}}, {@uid_lt={'uid<', r3}}, {@fowner_eq}, {@appraise_type}, {@fsname={'fsname', 0x3d, '&^!'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000004100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) epoll_pwait2(r4, &(0x7f0000004140)=[{}], 0x1, &(0x7f0000004180), &(0x7f00000041c0)={[0x4]}, 0x8) clock_gettime(0x0, &(0x7f0000004240)={0x0, 0x0}) futex(&(0x7f0000004200)=0x1, 0xd, 0x0, &(0x7f0000004280)={r5, r6+10000000}, &(0x7f00000042c0), 0x1) clock_gettime(0x6, &(0x7f0000004300)) futex(&(0x7f0000004340)=0x1, 0xa, 0x2, &(0x7f0000004380)={0x0, 0x3938700}, &(0x7f00000043c0), 0x0) io_getevents(0x0, 0xffffffff, 0x1, &(0x7f0000004400)=[{}], &(0x7f0000004440)={0x0, 0x989680}) clock_gettime(0x0, &(0x7f00000044c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000004480)={[0x100]}, 0x0, &(0x7f0000004500)={r7, r8+60000000}, 0x8) clock_gettime(0x0, &(0x7f0000004540)={0x0, 0x0}) nanosleep(&(0x7f0000004580)={r9, r10+60000000}, &(0x7f00000045c0)) clock_getres(0x3, &(0x7f0000004600)) io_pgetevents(0x0, 0x3f, 0x6, &(0x7f0000004680)=[{}, {}, {}, {}, {}, {}], &(0x7f0000004780), &(0x7f0000004800)={&(0x7f00000047c0)={[0x2]}, 0x8}) 19:19:33 executing program 7: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x334, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c0}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd52}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xeeb}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xccc2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2f3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x337}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x334}, 0x1, 0x0, 0x0, 0x851}, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) getxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'btrfs.', ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, &(0x7f0000000600)=""/226, 0xe2) tee(r0, r0, 0x9, 0xa) mount$9p_xen(&(0x7f0000000700), &(0x7f0000000740)='./file0/file0\x00', &(0x7f0000000780), 0x8000, &(0x7f00000007c0)={'trans=xen,', {[{@cache_fscache}, {@nodevmap}], [{@measure}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, 'ib\x00'}}]}}) close(r1) ioctl$int_in(r1, 0x5421, &(0x7f0000000840)=0x9) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000880)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@private0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private0}}, &(0x7f0000000a80)=0xe8) r4 = getegid() fchown(r2, r3, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) clock_gettime(0x0, &(0x7f0000005100)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000004f40)=[{{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000001d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001e00)=@abs, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000001e80)=""/104, 0x68}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/31, 0x1f}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/104, 0x68}], 0x5, &(0x7f0000004040)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000004100)=@abs, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000004180)=""/42, 0x2a}], 0x1, &(0x7f0000004200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000004300), 0x6e, &(0x7f0000004500)=[{&(0x7f0000004380)=""/183, 0xb7}, {&(0x7f0000004440)}, {&(0x7f0000004480)=""/106, 0x6a}], 0x3, &(0x7f0000004540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000004580)=@abs, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004600)}, {&(0x7f0000004640)=""/71, 0x47}], 0x2}}, {{&(0x7f0000004700), 0x6e, &(0x7f0000004a40)=[{&(0x7f0000004780)=""/97, 0x61}, {&(0x7f0000004800)=""/148, 0x94}, {&(0x7f00000048c0)=""/187, 0xbb}, {&(0x7f0000004980)=""/7, 0x7}, {&(0x7f00000049c0)=""/70, 0x46}], 0x5, &(0x7f0000004ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004c00)=""/120, 0x78}, {&(0x7f0000004c80)=""/193, 0xc1}, {&(0x7f0000004d80)=""/211, 0xd3}], 0x3, &(0x7f0000004ec0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x7, 0x0, &(0x7f0000005140)={r6, r7+10000000}) statx(r0, &(0x7f0000005180)='./file0/file0\x00', 0x1000, 0x800, &(0x7f00000051c0)) [ 157.021910] EXT4-fs (loop0): unmounting filesystem. VM DIAGNOSIS: 19:19:32 Registers: info registers vcpu 0 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822b25c1 RDI=ffffffff8763fae0 RBP=ffffffff8763faa0 RSP=ffff888042c27698 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000074 R11=0000000000000001 R12=0000000000000074 R13=ffffffff8763faa0 R14=0000000000000010 R15=ffffffff822b25b0 RIP=ffffffff822b2619 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f018663e700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2da26000 CR3=00000000414cc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f01891af7c0 00007f01891af7c8 YMM02=0000000000000000 0000000000000000 00007f01891af7e0 00007f01891af7c0 YMM03=0000000000000000 0000000000000000 00007f01891af7c8 00007f01891af7c0 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffff00000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffffffff8111b37c RCX=1ffffffff0e0ace0 RDX=1ffff11002ea3c74 RSI=1ffff11008127e4a RDI=ffff88801751e3a0 RBP=ffff88801751d040 RSP=ffff88804093f158 R8 =0000000000000000 R9 =ffff88804093f240 R10=ffffed1008127e55 R11=0000000000000001 R12=ffffed1008127e4a R13=ffffed1008127e49 R14=ffff88804093f240 R15=ffff88804093f240 RIP=ffffffff81205271 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555d3e400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000040 CR3=00000000337f8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000