Warning: Permanently added '[localhost]:64197' (ECDSA) to the list of known hosts.
2022/10/04 00:08:36 fuzzer started
2022/10/04 00:08:36 dialing manager at localhost:35095
syzkaller login: [   35.835129] cgroup: Unknown subsys name 'net'
[   35.968631] cgroup: Unknown subsys name 'rlimit'
2022/10/04 00:08:50 syscalls: 2215
2022/10/04 00:08:50 code coverage: enabled
2022/10/04 00:08:50 comparison tracing: enabled
2022/10/04 00:08:50 extra coverage: enabled
2022/10/04 00:08:50 setuid sandbox: enabled
2022/10/04 00:08:50 namespace sandbox: enabled
2022/10/04 00:08:50 Android sandbox: enabled
2022/10/04 00:08:50 fault injection: enabled
2022/10/04 00:08:50 leak checking: enabled
2022/10/04 00:08:50 net packet injection: enabled
2022/10/04 00:08:50 net device setup: enabled
2022/10/04 00:08:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/04 00:08:50 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/04 00:08:50 USB emulation: enabled
2022/10/04 00:08:50 hci packet injection: enabled
2022/10/04 00:08:50 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930                                          )
2022/10/04 00:08:50 802.15.4 emulation: enabled
2022/10/04 00:08:50 fetching corpus: 50, signal 24037/25898 (executing program)
2022/10/04 00:08:50 fetching corpus: 100, signal 31851/35475 (executing program)
2022/10/04 00:08:50 fetching corpus: 150, signal 41395/46635 (executing program)
2022/10/04 00:08:50 fetching corpus: 200, signal 47263/54106 (executing program)
2022/10/04 00:08:50 fetching corpus: 250, signal 51570/59981 (executing program)
2022/10/04 00:08:50 fetching corpus: 300, signal 59705/69501 (executing program)
2022/10/04 00:08:50 fetching corpus: 350, signal 66745/77874 (executing program)
2022/10/04 00:08:51 fetching corpus: 400, signal 71666/84101 (executing program)
2022/10/04 00:08:51 fetching corpus: 450, signal 77731/91370 (executing program)
2022/10/04 00:08:51 fetching corpus: 500, signal 82278/97077 (executing program)
2022/10/04 00:08:51 fetching corpus: 550, signal 84188/100327 (executing program)
2022/10/04 00:08:51 fetching corpus: 600, signal 86411/103845 (executing program)
2022/10/04 00:08:51 fetching corpus: 650, signal 88473/107207 (executing program)
2022/10/04 00:08:51 fetching corpus: 700, signal 92629/112405 (executing program)
2022/10/04 00:08:52 fetching corpus: 750, signal 94990/115982 (executing program)
2022/10/04 00:08:52 fetching corpus: 800, signal 97008/119208 (executing program)
2022/10/04 00:08:52 fetching corpus: 850, signal 98957/122303 (executing program)
2022/10/04 00:08:52 fetching corpus: 900, signal 102150/126516 (executing program)
2022/10/04 00:08:52 fetching corpus: 950, signal 103719/129263 (executing program)
2022/10/04 00:08:52 fetching corpus: 1000, signal 105533/132189 (executing program)
2022/10/04 00:08:52 fetching corpus: 1050, signal 107033/134821 (executing program)
2022/10/04 00:08:52 fetching corpus: 1100, signal 109817/138520 (executing program)
2022/10/04 00:08:52 fetching corpus: 1150, signal 111768/141458 (executing program)
2022/10/04 00:08:53 fetching corpus: 1200, signal 114347/144932 (executing program)
2022/10/04 00:08:53 fetching corpus: 1250, signal 117046/148418 (executing program)
2022/10/04 00:08:53 fetching corpus: 1300, signal 118677/151014 (executing program)
2022/10/04 00:08:53 fetching corpus: 1350, signal 120214/153516 (executing program)
2022/10/04 00:08:53 fetching corpus: 1400, signal 121115/155520 (executing program)
2022/10/04 00:08:53 fetching corpus: 1450, signal 122081/157554 (executing program)
2022/10/04 00:08:53 fetching corpus: 1500, signal 123689/160067 (executing program)
2022/10/04 00:08:53 fetching corpus: 1550, signal 125665/162823 (executing program)
2022/10/04 00:08:54 fetching corpus: 1600, signal 128699/166416 (executing program)
2022/10/04 00:08:54 fetching corpus: 1650, signal 130964/169380 (executing program)
2022/10/04 00:08:54 fetching corpus: 1700, signal 132016/171311 (executing program)
2022/10/04 00:08:54 fetching corpus: 1750, signal 133732/173769 (executing program)
2022/10/04 00:08:54 fetching corpus: 1800, signal 135494/176267 (executing program)
2022/10/04 00:08:54 fetching corpus: 1850, signal 136316/178045 (executing program)
2022/10/04 00:08:54 fetching corpus: 1900, signal 137576/180112 (executing program)
2022/10/04 00:08:54 fetching corpus: 1950, signal 138346/181806 (executing program)
2022/10/04 00:08:55 fetching corpus: 2000, signal 139665/183979 (executing program)
2022/10/04 00:08:55 fetching corpus: 2050, signal 140403/185680 (executing program)
2022/10/04 00:08:55 fetching corpus: 2100, signal 141683/187799 (executing program)
2022/10/04 00:08:55 fetching corpus: 2150, signal 142558/189557 (executing program)
2022/10/04 00:08:55 fetching corpus: 2200, signal 143325/191201 (executing program)
2022/10/04 00:08:55 fetching corpus: 2250, signal 144593/193178 (executing program)
2022/10/04 00:08:55 fetching corpus: 2300, signal 145945/195234 (executing program)
2022/10/04 00:08:55 fetching corpus: 2350, signal 147159/197190 (executing program)
2022/10/04 00:08:55 fetching corpus: 2400, signal 148478/199211 (executing program)
2022/10/04 00:08:55 fetching corpus: 2450, signal 149880/201185 (executing program)
2022/10/04 00:08:55 fetching corpus: 2500, signal 151340/203267 (executing program)
2022/10/04 00:08:56 fetching corpus: 2550, signal 152545/205028 (executing program)
2022/10/04 00:08:56 fetching corpus: 2600, signal 153355/206634 (executing program)
2022/10/04 00:08:56 fetching corpus: 2650, signal 154733/208543 (executing program)
2022/10/04 00:08:56 fetching corpus: 2700, signal 156271/210545 (executing program)
2022/10/04 00:08:56 fetching corpus: 2750, signal 156620/211775 (executing program)
2022/10/04 00:08:56 fetching corpus: 2800, signal 158918/214218 (executing program)
2022/10/04 00:08:56 fetching corpus: 2850, signal 159775/215759 (executing program)
2022/10/04 00:08:56 fetching corpus: 2900, signal 160764/217365 (executing program)
2022/10/04 00:08:56 fetching corpus: 2950, signal 161782/218947 (executing program)
2022/10/04 00:08:57 fetching corpus: 3000, signal 163281/220835 (executing program)
2022/10/04 00:08:57 fetching corpus: 3050, signal 164257/222370 (executing program)
2022/10/04 00:08:57 fetching corpus: 3100, signal 165508/224073 (executing program)
2022/10/04 00:08:57 fetching corpus: 3150, signal 166182/225418 (executing program)
2022/10/04 00:08:57 fetching corpus: 3200, signal 167385/227110 (executing program)
2022/10/04 00:08:57 fetching corpus: 3250, signal 168543/228731 (executing program)
2022/10/04 00:08:57 fetching corpus: 3300, signal 169396/230177 (executing program)
2022/10/04 00:08:58 fetching corpus: 3350, signal 170203/231574 (executing program)
2022/10/04 00:08:58 fetching corpus: 3400, signal 171518/233225 (executing program)
2022/10/04 00:08:58 fetching corpus: 3450, signal 172280/234560 (executing program)
2022/10/04 00:08:58 fetching corpus: 3500, signal 173433/236106 (executing program)
2022/10/04 00:08:58 fetching corpus: 3550, signal 173891/237212 (executing program)
2022/10/04 00:08:58 fetching corpus: 3600, signal 174661/238510 (executing program)
2022/10/04 00:08:58 fetching corpus: 3650, signal 175572/239882 (executing program)
2022/10/04 00:08:58 fetching corpus: 3700, signal 176110/241069 (executing program)
2022/10/04 00:08:59 fetching corpus: 3750, signal 177160/242451 (executing program)
2022/10/04 00:08:59 fetching corpus: 3800, signal 177744/243628 (executing program)
2022/10/04 00:08:59 fetching corpus: 3850, signal 179175/245282 (executing program)
2022/10/04 00:08:59 fetching corpus: 3900, signal 179868/246556 (executing program)
2022/10/04 00:08:59 fetching corpus: 3950, signal 181295/248109 (executing program)
2022/10/04 00:08:59 fetching corpus: 4000, signal 181975/249263 (executing program)
2022/10/04 00:08:59 fetching corpus: 4050, signal 182536/250365 (executing program)
2022/10/04 00:08:59 fetching corpus: 4100, signal 183141/251528 (executing program)
2022/10/04 00:08:59 fetching corpus: 4150, signal 183748/252643 (executing program)
2022/10/04 00:09:00 fetching corpus: 4200, signal 184261/253671 (executing program)
2022/10/04 00:09:00 fetching corpus: 4250, signal 185224/255020 (executing program)
2022/10/04 00:09:00 fetching corpus: 4300, signal 186281/256280 (executing program)
2022/10/04 00:09:00 fetching corpus: 4350, signal 186966/257377 (executing program)
2022/10/04 00:09:00 fetching corpus: 4400, signal 187416/258347 (executing program)
2022/10/04 00:09:00 fetching corpus: 4450, signal 187981/259391 (executing program)
2022/10/04 00:09:00 fetching corpus: 4500, signal 188615/260473 (executing program)
2022/10/04 00:09:00 fetching corpus: 4550, signal 189302/261572 (executing program)
2022/10/04 00:09:00 fetching corpus: 4600, signal 189986/262625 (executing program)
2022/10/04 00:09:01 fetching corpus: 4650, signal 190638/263680 (executing program)
2022/10/04 00:09:01 fetching corpus: 4700, signal 191224/264704 (executing program)
2022/10/04 00:09:01 fetching corpus: 4750, signal 192106/265831 (executing program)
2022/10/04 00:09:01 fetching corpus: 4800, signal 192538/266774 (executing program)
2022/10/04 00:09:01 fetching corpus: 4850, signal 193105/267731 (executing program)
2022/10/04 00:09:01 fetching corpus: 4900, signal 193455/268646 (executing program)
2022/10/04 00:09:01 fetching corpus: 4950, signal 194215/269668 (executing program)
2022/10/04 00:09:01 fetching corpus: 5000, signal 194784/270615 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/271401 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/272148 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/272931 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/273744 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/274509 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/275271 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/276004 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/276731 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/277502 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/278243 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/278966 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/279717 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/280465 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/281198 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/281951 (executing program)
2022/10/04 00:09:01 fetching corpus: 5001, signal 194785/282708 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/283435 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/284179 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/284906 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/285657 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/286396 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/287128 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/287884 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/288626 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/289391 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/290104 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/290869 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/291624 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/292405 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/293163 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/293918 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/294682 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/295428 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/296188 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/296924 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/297713 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/298438 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/299194 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/299957 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/300722 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/301497 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/302275 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/303059 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/303855 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/304602 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/305373 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/306096 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/306858 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/307620 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/308372 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/309171 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/309915 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/310683 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/311447 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/311723 (executing program)
2022/10/04 00:09:02 fetching corpus: 5001, signal 194785/311723 (executing program)
2022/10/04 00:09:04 starting 8 fuzzer processes
00:09:04 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/4\x00')
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004)
close(0xffffffffffffffff)
sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008801}, 0x40)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x40040, 0x0)
write$P9_RLERROR(r2, &(0x7f00000002c0)={0xe, 0x7, 0x2, {0x5, 'TIPC\x00'}}, 0xe)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r3=>r0, {0x2}}, './file0\x00'})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r1, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x844)
dup3(r0, r2, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x1)
sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x208, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d348e33}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x875}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x703}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}]}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe50}]}]}, 0x208}}, 0x20000041)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0x200, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "19bb69324c696e5d4f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "f07b"}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x400c1)
r5 = dup3(r4, r4, 0x80000)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000008c0)={<r6=>0x0, <r7=>0x0})
timerfd_settime(r2, 0x1, &(0x7f0000000900)={{0x77359400}, {r6, r7+60000000}}, &(0x7f0000000940))
fchmodat(0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x110)

00:09:04 executing program 1:
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x413}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0xc1feef292fdd4f01}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x20044000)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1ec, 0x0, 0xa9e235fa68d959bb, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc4, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5592c8cf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b19b684}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7453225}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x432638ff}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44531597}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38a0effb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x154abb3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45d3ab51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x368996c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xd0, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e1c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a05}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58949fbb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe6a8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe349}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7905aa08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a032205}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cdd15fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f4b9dc6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x809b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ea6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f7b1abf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3451d535}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b97323c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3322}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe8c61c2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x312708a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c83947d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42ef30f9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c1dda64}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29b1278c}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1b0, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @local, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x696}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x760}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6be}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9854}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe508}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbac}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf886}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000000}, 0xc044010)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x886}, 0x10)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xec, 0x0, 0x314, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5be06c2b1b60117b2d571cd785"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e16f5477e49068aea6624e1adb"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9eb6ce2574"}]}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY={0x58, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_SEQ={0x8, 0x4, "8017d1f8"}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d3cc8bbeb635dd3da61fd39b63"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x4800}, 0x4000850)
r1 = signalfd4(r0, &(0x7f0000000940)={[0xffffffffffffff7f]}, 0x8, 0xc00)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x48084)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb0, 0x3, 0x8, 0x301, 0x0, 0x0, {0xc, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x62}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xb9c}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8fc0}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8090}, 0x20040044)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040010}, 0x40)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0xd22c5000)
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000d80))
fadvise64(r0, 0x1ff, 0x2, 0x5)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000dc0), 0x307542, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000e00)={{0x73, @remote, 0x4e21, 0x1, 'rr\x00', 0x4, 0x800, 0x8}, {@multicast2, 0x4e20, 0x4, 0x7, 0xc2f, 0x7}}, 0x44)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000001100)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000ec0)={0x1cc, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x101, @private0}}}}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x48000}, 0x84)
openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/key-users\x00', 0x0, 0x0)
socket$inet(0x2, 0x80000, 0x0)

00:09:04 executing program 2:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x23d000d8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0x50}, 0x1, 0x0, 0x0, 0x8850}, 0x4)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x348, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6e, 0x10}}}}, [@NL80211_ATTR_TX_RATES={0x280, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x12, 0x60, 0x5, 0x30, 0x36, 0x4, 0x18, 0x4, 0x48, 0x52, 0x3, 0x6c, 0x30, 0x0, 0x0, 0x0, 0x0, 0x16, 0x18, 0xc, 0x6c, 0xb, 0x5, 0x1d, 0x60, 0x70, 0x4, 0x24, 0xc, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x4}, {0x2, 0xa}, {0x7, 0x6}, {0x5, 0x9}, {0x6, 0xa}, {0x2, 0x5}, {0x3, 0x2}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0x5}, {0x2, 0x7}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0x7}, {0x7, 0x3}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0x9}, {0x7, 0xa}, {0x2, 0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x7, 0x4}, {0x2, 0x7}, {0x7, 0x8}, {0x2, 0x8}, {0x1, 0x6}, {0x4, 0x9}, {0x5, 0x9}, {0x2, 0x4}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xe, 0x1b, 0x9, 0x5, 0xc, 0x9, 0x30, 0x3e, 0x3, 0x6, 0x48, 0xc, 0x60]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x60, 0x5, 0x36, 0x18, 0x24, 0x18, 0xa89aa854ff93011e, 0xc, 0x48, 0xb, 0x1, 0x3, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x4, 0x18, 0x12, 0x1b, 0xc, 0x30, 0x12, 0x24, 0x6c, 0xc, 0x36, 0x1b, 0x64, 0x4, 0xcfd1c262b8e489a4, 0x36, 0x9, 0x60, 0x1b, 0x1b, 0x16, 0x9, 0x2, 0x48, 0x4, 0x1, 0x9, 0x3, 0x5, 0x16, 0x4]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x6, 0x60, 0x12, 0x60, 0x1, 0x6, 0x16, 0x36, 0xca638fb113452557, 0x30, 0x18, 0x5, 0x1, 0x36, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5805, 0x7ff, 0x7, 0x600, 0x0, 0x3, 0x8, 0x8]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x9, 0x8, 0x200, 0x9, 0x8, 0x6]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x1, 0x48, 0x1, 0x1, 0x6c, 0x16, 0x36, 0x1f, 0x4, 0x9, 0xb, 0x5, 0x4, 0x36, 0x5, 0x6c, 0x1, 0x28, 0x12]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0xa}, {0x2, 0x2}, {0x5, 0x5}, {0x0, 0x2}, {0x3, 0x5}, {0x7, 0x7}, {0x6}, {0x7, 0x3}, {0x3, 0x5}, {0x0, 0x8}, {0x7, 0x3}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0xa}, {0x2, 0x2}, {0x0, 0x4}, {0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x1, 0xa}, {0x7, 0x6}]}]}, @NL80211_BAND_6GHZ={0x13c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x9, 0x5, 0x60, 0x4, 0x48, 0x2, 0x24, 0x4, 0x4, 0x1, 0x4, 0xc, 0x24, 0x4, 0x30, 0x48, 0x6c, 0x36, 0x24, 0x1b, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc, 0x40, 0x6, 0x5, 0x8, 0x1d4b, 0x5, 0x1]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x3}, {0x7, 0x8}, {0x2, 0xa}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x2, 0x2}, {0x0, 0xa}, {0x4, 0x3}, {0x3}, {0x5, 0xa}, {0x6, 0x1}, {0x6}, {0x2, 0x8}, {0x1}, {0x2, 0x9}, {0x6, 0x4}, {0x2, 0x5}, {0x2, 0x1}, {0x7, 0x1}, {0x1, 0x3}, {0x1, 0xa}, {0x6, 0x2}, {0x6, 0xa}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0x1}, {0x4, 0x3}, {0x4, 0x7}, {0x6, 0x4}, {0x1, 0x6}, {0x3, 0x2}, {0x3, 0x9}, {0x2, 0x2}, {0x6, 0x1}, {0x2, 0x6}, {0x7, 0xa}, {0x5, 0x6}, {0x6, 0x6}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0x8}, {0x3, 0x4}, {0x7, 0x2}, {0x3, 0x4}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x1}, {0x4}, {0x3}, {0x3}, {0x0, 0x8}, {0x6, 0x9}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0xa}, {0x4, 0x7}, {0x6, 0x2}, {0x0, 0x6}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x3}, {0x3, 0x4}, {0x1, 0x5}, {0x1}, {0x1, 0x6}, {0x2, 0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0x3}, {0x2, 0x1}, {0x4, 0xa}, {0x6, 0x9}, {0x6, 0x3}, {0x4, 0x6}, {0x1}, {0x4, 0x3}, {0x4, 0x8}, {0x3}, {0x4, 0x9}, {0x7, 0x4}, {0x7, 0x1}, {0x6, 0xa}, {0x2, 0x3}, {0x5, 0x7}, {0x7, 0xa}, {0x7, 0x5}, {0x5, 0x9}, {0x6, 0x7}, {0x1, 0x6}, {0x2, 0xa}, {0x5}, {0x4, 0x7}, {0x2, 0x8}, {0x5, 0x9}, {0x5, 0xa}, {0x5, 0x7}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0xa}, {0x7, 0x9}, {0x1}, {0x1}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x2}, {0x0, 0x7}, {0x6, 0xa}, {0x1, 0xa}, {0x2, 0x9}, {0x7, 0x2}, {0x5, 0x9}, {0x5, 0x3}, {0x1, 0xa}, {0x2}, {0x7, 0x9}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0x3}, {0x4, 0x7}, {0x7, 0x3}, {0x6, 0x6}, {0x5, 0x8}, {0x2, 0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x4}, {0x4, 0x6}, {0x7, 0x1}, {}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x3, 0x2, 0x12, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0xa}, {0x4, 0x2}, {0x0, 0xa}, {0x7, 0x5}, {0x7, 0x6}, {0x4, 0x2}, {0x6, 0x8}, {0x1, 0x6}, {0x3}, {0x4, 0x4}, {0x1, 0x4}, {0x3}, {0x1, 0x6}, {0x2, 0x3}, {0x5, 0x7}, {0x3, 0xa}, {0x5, 0x5}, {0x7, 0x5}, {0x5, 0xa}, {0x5, 0x5}, {}, {0x5, 0x1}, {0x0, 0x7}, {0x2, 0x6}, {0x4, 0x4}, {0x5}, {0x5, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x5}, {0x3}, {0x6, 0x3}, {0x3, 0x8}, {0x2, 0x1}, {0x2, 0x8}, {0x4, 0x7}, {0x3, 0x2}, {0x6}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0xa}, {0x1, 0x2}, {0x2, 0x1}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x6}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x7}, {0x7}, {0x5, 0xa}, {0x3, 0x3}, {0x6, 0x7}, {0x0, 0x2}, {0x3}, {0x4, 0x1}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x9}, {0x4, 0x5}, {0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x7, 0x7}, {0x2, 0x3}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x6}, {0x0, 0x7}, {0x4, 0x6}, {0x4, 0x3}, {0x3, 0x7}, {0x6, 0x9}, {0x1, 0x1}]}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x54, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xf}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x1}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x11}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x1}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x10}]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x7ff}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x2}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x38}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3d}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2d}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}]}, 0x348}, 0x1, 0x0, 0x0, 0x4808}, 0x4000)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xc8, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xbc8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6d7}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0xc001)
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x29, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x2010044}, 0x4e008)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r2, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x40)
r4 = accept4(0xffffffffffffffff, &(0x7f0000000ac0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000b40)=0x80, 0x80c00)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x194, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x600000}, {0x6, 0x11, 0x1f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0xffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8039}, {0x6, 0x11, 0x3f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x31b}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000040)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000e00)={0x6, 'netpci0\x00', {0x9}, 0x1f})
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000e40)={{0x1, 0x1, 0x18, <r5=>r4, {0x1c000}}, './file0\x00'})
sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xd4, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc9cd}]}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x18, <r6=>r5}, './file0/file0\x00'})
sendmmsg$sock(r6, &(0x7f0000001980)=[{{&(0x7f0000001080)=@nfc_llcp={0x27, 0x1, 0x1, 0x3, 0x2, 0x1f, "c31ef110b8d2d8f183bca22b905d4f902d20133bea316e285ed44c1e566e49e8ec3b255bcbae7601ceead5ea53052a1652894a1765a755e0a6bb11c39e799d", 0x5}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001100)="bbcac38a79476a9b77f7450bc9d60a080bb0f4a9ad2cd04cb1ce25f7458461b7f5d4056026b20e3a2cde578dd6ec675853f61731731e7e585ae1f10f5218937a1e81e3526c86fa4e4ffa76237d3be0fbcb42f2a1dced4176ffa6ff9d3a6cd3dd1d54e6ce7fa305299ce5ed39464b98f5451e67eff829c12e364cbd915b1790078b4617cab9a7e2f0375727c5125ba791599e91d10ee73d6a19c4238d4d5ddd36b65c942c7ed1a0bfa517cfc7f2edb5f61837b75762f25f98562090b7c2c69cf44111201e8d61750584adbf777fa3eb5b9aeab1e6", 0xd4}, {&(0x7f0000001200)="421f443cfde1d55426b836f7260119c080b6846f5eafe393e1044e862f98b43908662c3dda662d66c3fd8fb13a19101896f8fa16fd8357d508ed155463afe59bf758bc169ef562b700690294a493f42c0b7336eadc398599a9c2addd328e4cd86624efd5302f4107f0cc889d250d4e4dd8a41d933b783f70f900fc375d23d27e4e17cdd62d3b8183a7115fc8212695e432294406f439b4c199ebd4404f7a8bad3d631a5ae4b14c4041c85cc1f815b32b97760326f1b710bc9d03ab2219e5ec44c2607602d7ee9f7e09adb26d82d91967ccb2aeac8786fcd1", 0xd8}, {&(0x7f0000001300)="d8d810113d2f538dde92824d65be92cf3b30c133e9f2d855c0cf85f21c1e878f8d1d6f21cbfa8c8b17e8074e455794e4da7c7be3838a37713cf341251b896c8d39eba9ca5c1f1d93bfcb4045", 0x4c}, {&(0x7f0000001380)="343fcaeae48cdba07af2dec12075a1b18ba8c0e7dc2e0aa6b1cdefef061377337d72a4f4dd06ae32", 0x28}, {&(0x7f00000013c0)="c75437041fbf71dd8d803051673ee560de08706e9316b20849e0d6237e8a962b10d5fd19b46a013a6f9560e03cc713b8299f132bc3c387b1a58d6ef5465dd89f03468a8e580508764ef6e195014f3c4b789a6bb76df135660189c5da1bbba731d118a49337df8d3516930b8578681279094a8bda1ee7fd8f9fdf3a93bdd79a8012ce9b4a", 0x84}], 0x5, &(0x7f0000001500)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}}, {{&(0x7f0000001580)=@phonet={0x23, 0x1, 0x20, 0x5}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001600)="15f9a8649e5a47c551120252b3502944aedf9ef526b6e963b84e9d4e5bfe89501f5bd1e500b9b7bd498a0136ed5ab1b8f53caf33df8ca1bc497ce2fb3132b4a55d15b7b3d1a936225ce1b2b766284c92db61ad62e564c587cd2025f36f41d05a1b7bef3b16e573f64d00e6d6d69d944471e974bd19454abc82e93c4fbb64fd587799faa866a51a4a882c59db53c4970ffea80140182737964185c7b25cfbce01bb46f391ecaa9c6b7a0255cbeb2c75d112432e644b23c4b2daf0eac9f1ebd772d809711bd4059a83646bafa20ba48ab879448bd7564520611d2d52609304d5029676aca914c1", 0xe6}, {&(0x7f0000001700)="4db9aa79a6859bb5f2c5c3c4ec95e329549ef46f2478721e5c0b079ef1d4e7851ad82365879e2ba2b3fd5386b83f330a147379548b3fc9c3b88c5062a88f02ca85004cfbe28486224e111dbdd9cac9fa78dd8f", 0x53}, {&(0x7f0000001780)="ff1eb3ce7e6e104dd5a63b5438bb00b8a6c27b9c4640ef1858ed576e3ece4f309ad732f6923c61e0a90b5757962f6382f575a5e77d75028f3d536d1e7995a2dddada6d11a9fce4302e495d8ab7419a251ece194a8550268df77992d30aa842b49e2375dc7fb3bc1c159df0b80aa0e1c32239c065b202c9371d9bcb6994b14c0a7d4280d64416536da488fe6e745f1cfcad6ff1bddc1c0e7430e344a877b6c4cd29cca5084e5f08eaaed01274af3932081b8c24ceb2b28b0f70bfe94e08e7c51f1f076d60b6f82aee1fa904705a9ca0f59016b294eb94d30867f30a9341", 0xdd}], 0x3, &(0x7f00000018c0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x1c9d24f0}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x90}}], 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0xa0, 0x2, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xe9}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x69}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20060801}, 0x24040044)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x48, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x37c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008090}, 0x8004)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r5, 0x860a5000)
sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={0xb0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2d1f}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001)

[   64.134873] audit: type=1400 audit(1664842144.920:6): avc:  denied  { execmem } for  pid=284 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
00:09:04 executing program 3:
ptrace$setopts(0x4200, 0xffffffffffffffff, 0xae7, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r0=>0x0})
r1 = getpgid(r0)
r2 = memfd_secret(0x80000)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x4004080)
io_setup(0x3, &(0x7f0000000200)=<r3=>0x0)
r4 = eventfd2(0x2, 0x80001)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001240)={{0x1, 0x1, 0x18, <r5=>r2, {0x8, 0x6}}, './file0\x00'})
io_submit(r3, 0x1, &(0x7f00000012c0)=[&(0x7f0000001280)={0x0, 0x0, 0x0, 0x3, 0x4, r4, &(0x7f0000000240)="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", 0x1000, 0x2, 0x0, 0x3, r5}])
getpgid(r0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f0000001300), 0x2, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001340)=<r7=>0x0)
tkill(r7, 0x12)
openat$cgroup_pressure(r2, &(0x7f0000001380)='io.pressure\x00', 0x2, 0x0)
r8 = fork()
syz_open_procfs(r8, &(0x7f00000013c0)='children\x00')
r9 = memfd_secret(0x0)
io_submit(r3, 0x2, &(0x7f00000015c0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0xff6d, r2, &(0x7f0000001400)="0d7692df314863a4ce9e96ba077346687f2f9a8f0f3ccca64c2bea66e1fcff9e57b338858761c67bc670d12e022a8d48bde520fd00d21642ab4129e962c5772293f3e923c1fffc6b7f41fb7a4dfb1b993e3fb8ab7aa5d91c5e78bfcabb5f1cf99c11df35c43b03c777db7bd0ef08e49b2a437462c58b592e23091fee83a7ffb9dbffa83ffba04f8f77ab260b76dd580e3a4d8611431686af", 0x98, 0xf2, 0x0, 0x3, r9}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x2, 0x5, r5, &(0x7f0000001500)="36130ab2f1a907810fa4912545ce991ed94ee618a0c8a5c33427c66ef8ce3e1c392da5c8e34d2ed6e63ea3d3ae9096c15e695abe9ae1b2e35e031451bf9a597ee64a", 0x42, 0xffffffffffff7fff, 0x0, 0x4, r2}])
io_setup(0x9, &(0x7f0000001600))

00:09:04 executing program 5:
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000100))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000140))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000180))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000001c0))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000200))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000240))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000280))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000002c0))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000300))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000340))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000380))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000003c0))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000400))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000440))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000480))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000004c0))

00:09:04 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000000))
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0', [{0x20, '-\'{^)\"'}, {0x20, '::+'}, {0x20, '.'}, {0x20, '@#\xa7'}, {0x20, '&'}], 0xa, "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"}, 0x119)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000800)=0xe8)
r4 = getegid()
r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000f80), 0x2, 0x0)
r6 = io_uring_setup(0x7f20, &(0x7f0000000fc0)={0x0, 0xc4aa, 0x1, 0x0, 0x3bf})
statx(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', 0x1000, 0x820, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003f80)=[{{&(0x7f0000001780), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000001800)=""/141, 0x8d}, {&(0x7f00000018c0)=""/40, 0x28}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/34, 0x22}, {&(0x7f0000002940)=""/228, 0xe4}, {&(0x7f0000002a40)=""/64, 0x40}], 0x6, &(0x7f0000002b00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r8=>0x0}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000002c40)=@abs, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000002cc0)=""/208, 0xd0}, {&(0x7f0000002dc0)=""/21, 0x15}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/240, 0xf0}], 0x4, &(0x7f0000003f40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x2, 0x20, &(0x7f0000004000)={0x0, 0x3938700})
getgroups(0x3, &(0x7f0000004040)=[0xffffffffffffffff, 0x0, <r9=>0xee00])
r10 = openat$random(0xffffffffffffff9c, &(0x7f0000004080), 0x84000, 0x0)
r11 = syz_open_dev$usbmon(&(0x7f00000040c0), 0x7, 0x18000)
r12 = syz_mount_image$vfat(&(0x7f0000004100), &(0x7f0000004140)='./file0\x00', 0x903, 0xa, &(0x7f0000005680)=[{&(0x7f0000004180)="536370a49200cdfc2948b25cd82f27f403b79e97b03d4d2575384bcbe2b4367b0ceed6a4639677a1f614055bfa5f883bff85e6f1ca9a2ba80da64c1913e677692110d6b04963e4cce24460b6a8cf8434172fd5448280305562d798b19bce4a93a413d88589ada2cb4d63a282b9bd1b1d87b575b062b28a5be64d298b3cf652", 0x7f, 0x800}, {&(0x7f0000004200)="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", 0x1000, 0xe03}, {&(0x7f0000005200)="e1d9f979b3897097e5ba9b56793d02949b4ce3a5f57ec43453270f6813a8b45871f63f32e968d394d7f22e46ec504fa9cb146a7b7bf6bb28e09834404de38398a04a0c196597f1ac886cc3932744328d2fcbcb7a98f452e312859d3330d8ccc04d010e422d716d00a0ce0b1615f4afe2cb8e7c7b574a7b4f37e31ccb33bc35ede0645fc4e84cc0d5aea8c85eacd40dbcda561589dc331ced4e108b04b940ec8a282a664ba3694c9066464133d0fcbba1ac79a62b19f664ac208f76c4948bcd65f338815616914e5c05c234", 0xcb, 0x12000000}, {&(0x7f0000005300)="171b56c50d109426255781f6f1aff27ff45d3443cf6ba2aaddf4145a75f9e51e81f2cb8d4c13f928d87142c74f148b665ad3ea2f8eb87507707cde23548ddd16b3a0c46586314ed6d675810817a9d2130120a32078bcb763d1959f495012fb8e76f42782d0744a7a", 0x68, 0xe9fc}, {&(0x7f0000005380)="f78a2cab6f8c2c076d545e66dd236689182b5e9e857d745fd069ea7ddc01f4287a5dd8c897256763a9bb7bd49dccc35e34e1ed6409ef62b96133e6d4f857864dae68ab63a2b3f616901688e4dc4980cf5cdb28fe043eda5e0f7e9e6bdf3f20eb5855ba779287471b5fb69427159cee49170710b2", 0x74, 0x1}, {&(0x7f0000005400)="fbf5563e81fae4eccdb40590e177edc0945d4f73cfc3a0ccb73910bbfee8df6845b68f209851995de0fdad74ad527af6845d93b25d8d0bdb80bbe2b97ef664499d532a48c8f147fd61725e752516feee110966649a1c", 0x56}, {&(0x7f0000005480)="cf1e9333436ab1205e4cb6cc8bc14f65e95f15974822ef67af840c84484b765ce3622426e1a7474d8b3f98cf3668f8ef5e7124206a2e180099beb8c1b8c2e5f8e8474ed8196793fe6ed3c7b518c28009fb1d4c90735bc6287ba16c41db40dac0d5a0fbaebe059f5735261033505a3e0b84759d6250ef12ae2e479decb18637", 0x7f, 0x100000000}, {&(0x7f0000005500)="58c99fbc264971678eda491904d39204fddef2eea76a54076960c5d6548709efeae61227c7af0e1b3256d7d153", 0x2d, 0x3}, {&(0x7f0000005540)="01713a7ec2db4c857ca90f487d6c682b630e1d77d83ff4f122e9ab0ee6612461993d9afed67de14127c6e043c3d34c0f51b79d5a2a700b75b6498ff5e980bdc1f6fd2bda194f7f44289ab4c09fdf89ef854d6c75191d05fb4b5fc0772d6ee0ddf2e34246579952958ca55633371a27b7613c5fd0d2dc4843a8d472d4999e39c1a7a7abbf3e72fc8a7a3e19478f5134bf3135a1094c7525648bba2cf884a0229d8b8e448920a4f0609194ffe6a13858d01271df2310e79c89", 0xb8, 0x9}, {&(0x7f0000005600)="8be47f29c816d15273a44a6309395bf30c78dd8da5e3154101c5b0fc5458b668243a9ba942d17958261af8fb0c61d6a68a130fcdfec3e53562a218e53dd1d74a1c162a69704e192ad029d98d80f66442a46cf788ca944bbf28cefc786c24a56a6d6a3e6c2df577abd33143d40463a1d8", 0x70, 0x5}], 0x1000004, &(0x7f0000005780)={[{@numtail}, {@shortname_win95}, {@utf8no}, {@uni_xlateno}], [{@uid_gt={'uid>', 0xee00}}, {@obj_user={'obj_user', 0x3d, '#! '}}, {@obj_user={'obj_user', 0x3d, '@#\xa7'}}, {@obj_user}, {@obj_role={'obj_role', 0x3d, '-\'{^)\"'}}, {@permit_directio}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005840)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000005940)=0xe8)
r14 = memfd_create(&(0x7f0000005980)='-%\x00', 0x7)
stat(&(0x7f0000005e40)='./file0\x00', &(0x7f0000005e80)={0x0, 0x0, 0x0, 0x0, <r15=>0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008400)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="507252dd74d3660e491bfc5659ded313c28499e06e7bfc676b37916116eba05b9f8ca80cbf2934004a1f31c64264c4bc1b16146b0c8a52bea505655c5f103f066f11335f86d1a9f74f8e20ef78b2d2511a35dc780965a1c2ad7f74c8d8ee567dc91a5cc0ab8bad538039384d6dc1077fedb71d8afba26eaa0fd6c0fe748b1abe07", 0x81}, {&(0x7f0000000300)="f041fd3166d27a03d7fefdc56c1eb379e1", 0x11}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x58, 0x4004}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="c08f66b85a994efbdeb179b0748d00d80b2eed8a8e26a7dafb8c44f6686694aa783dbcdc9012a675eca78b751d594229c5d4b800a631e274ba6da317636c80a7ae5ea53f6eb6dcb6fd565b8a4a912e324d42aefaa1336989283ed1c71f2869c8f5e8402ec5449dad63ebdf057e696a0817a0580b6334d52b247e7237dc259d0b24fecffa2e4f640ebff0123a98142c631b57ab8ab8a21058a01fddeff720a2e50a0986920f0fa9719bd7bfb298574c2894911be38c8b0a50ecbb1a8e601fc41695af972a1b", 0xc5}, {&(0x7f0000000540)="8af75491f2e1d6fee9ea88021452fc5c", 0x10}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="c37737c12764cb178eb2f24278e6ac6f3aabd1e2acb628158ba2c60310f60960eef0013f557f7640b37083d3a07b95b21bd9ccd7e33eea2ea9b19b6a70ecbe56b7b79abf04b077c36616a0338767368de17d2bbe626ed6fb9559d293498fb7cf7db888507303ba90eba12baa61f6b909e78e1700507735", 0x77}], 0x4, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}], 0x40, 0x40080}}, {{&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000900)}, {&(0x7f0000000940)="b8c27658fdafe5492b9d182c21ec043bcfc9f6d4cbc587af43cb3ceb15f12dfaed7af4cc9179621f1ba0600a1614a5b69f10dcee9fc045666f5ef693a4847e5eb260f06bd0c576fe9b2619b8cb44b1700e9425d3977b690fcd74891b1a498191e0204243d393cad0140137069254c27c432d7d74051f8e364c81a1626ea074761fe5f434d932077cfa869f86d94bc56f287d6b46222036a1ad84aea8bffbf9e19e47c31c3056844524ae1407", 0xac}, {&(0x7f0000000a00)="74edccd4c576e6689b5b6e5293cfa81d7db8aa108369a43d660b21f3f26527f47b16cb65ee9be353c4dc04ac8ef682caed2465dda213843d9b11de516c1d21ea607e735bd4267093428ebf538aeae245cc60c3e0b5b8617ceee21c12e4c8c8db49a75af5dfe226eeb7104ac582f416d5456a950d94822fb067b5c135a6f42d91860650aecaf8b6f7d457f7c5fd163b1274b0cd6041fd5eb158a0087223f7bfdb2ae96b0200c371e454ed9247bb9ed54d38031ea3cf45325329c165cbd544aeda9c756dac4c93c04ee45e", 0xca}, {&(0x7f0000000b00)="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", 0xfc}, {&(0x7f0000000c00)="e0c672a9c8176a393dc6f5e06984bf7f3710c1dea36a834d1ae4caf68641bed306fbdfb63d5d6a9f09b70879a8a824bec9a7af811b81f9c82c756224302311750e32d523bec6da0a30e289c76e967434a1", 0x51}, {&(0x7f0000000c80)="144d72d812a7c430068ab8538f0ee1139fe7b1d8b1ec3d810a34f24f51f66f6f0f7698d4b2ec3cdcc45fdabb518a0502df751f1791c97f2c3d3440d08860ef1a5f2b37fe7a2ddeec75638bdb99e3377f9b3f551a9b4a7f0c", 0x58}, {&(0x7f0000000d00)="c60e559fd16be4ecddb5c0fa27e88faa998d52da12820eee084729672ddd50b04cd2b3a8fb2ad20bcd29d583d8bb130fed25db290abc2b7d3f8725e47e999feb3a65b796db13ee", 0x47}, {&(0x7f0000000d80)="279e60ca5bb788b37e7de87cb20f8f749e4534975829a5450e58f8af18c63431f3beca37614abc957223368e70cbc44b799622978eb3e2cac6d6099fa8606b637b9b5c663befdf5c9ff4e8843925c80e5fc88be696efe7babd0c72992b73279ef1306d26e3b67051c95b14ff74c8965ca2bda7f845ed2fb4e799de8cd31fa2692cf9bf8c1032554e63035c43040b92ccc74feb651e54c20fe368ac9ba7d26ed6882314686b44", 0xa6}, {&(0x7f0000000e40)="32100fc338bf3374e7e7036683f9483562383c3f180e50a1592d5e91c4f26f0e3b98fdf974b8e2f1d7d553fa2139a6af93076d7d7062032e41ed58a7fe7f717826065e63d652437af0791103dc4a0627bebe4e535d23812de20ed26d481ae4bb0baf6302", 0x64}], 0x9, &(0x7f0000001040)=[@rights={{0x18, 0x1, 0x1, [r5, r6]}}], 0x18, 0x8000}}, {{&(0x7f0000001080)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001100)="db415f80e5e7cfad2c67d4890364b0ed94d19af2e562ee8113a7ff7f82c2e37a269844e8b718f42b939dd63cf773295971a5a168b0cefbfdfde41edd3ccd37072eec7f0f769462f4e407267375b203505f5091aadc9fe59a82bd465e81", 0x5d}, {&(0x7f0000001180)="f7a4ee72bbb912072a48011fed17cafb8d22636151e116e9de7e4b0e95cd26a41fce9b342eb672c3acb2737d8c94012b835a7f22987787e06093853296615180226765dc9dde752d3da759fea36df96e0039aa5a1a34576f848c769350dfbe80df301bb7086f", 0x66}, {&(0x7f0000001200)="eb5f36e8ea2cde2133480744c3df6f0adce48ab3754500a8a0dc259687c11fcbdd8bb55257c7b4105acab8e728925835384558d83e1388b96d000704f5add606e82dc3f90ea033a310d9b7aa8a2cde062416ed4f3795a4ac5f08fc3da2f861a449366f4a460d5c114930d39c99e3ba029d3d7f", 0x73}, {&(0x7f0000001280)="a4f5cd0cdc57902b9bf1e669580205db97cfbad316fe5d4e200157a051e69d50f481cd7675614df1aff697bcbb2717f8ed249e9d345feb6df9a108d5d53f9081f7f44caf7394a72f79ec3bc14f19279aeef30a33b989f0c5562c584d1b4ffb6b8a4f97c3ea67db3feb1271a2496a5595c567096acc5f9626ab9075e39916b2bd9ac72e983c1f0ca366ab1c8a700708c2af57b58316d841152e6d7b58dca64aee5a200f8cef06c4345795113b486006b9bff021b2df02e08de8de892cde1275d9f4961f2c3801010d4e64e49b476198231bbbe2cbd6f9", 0xd6}, {&(0x7f0000001380)="b42de10fa9aec7a69d5aa451c565ec0d98becdbe097a5c5dc5bee6a2988143cb302e1d4eafda72e88d2a441dff3d3740ec6c933cecfd7de3daa11b79d7af192b4c03d0e8849763b6d92f3ab8fdce0b7a87d6e0a3b6968be5c51cbf5cd750ce0457f5163f7d0a921f866886544d531601977744cd4868eaf29c96b45f4290a42d5e0b18fe1c51", 0x86}, {&(0x7f0000001440)="7319aa4debe5aa5d53cbc3cd524bcbdbe142a0894d76c2a859cf23e4b5bc8c6a567c2585729e50f49195d1b0e1ad4abc2b90ea1d35f582e4f62a203d2eade17df3eab1cc4b05c2e0e1f8e571a77672b59f3124678da495ea1b43d2aab186db2655fd4fbd780dcb8f3888d04c0be3d92e4179476c597191dbdb77ec272018034cd699d345786602711364c9fad58de8dae562e915a5d5f7ea7c4881344e7a04fea1e47c2959a10ea9bce470a6768e834257e32c4592966c7832c56b7aff863750daa9206f84861f1379c7caf624ca06c7b3e6e4422aac129f9dc4", 0xda}, {&(0x7f0000001540)="3b3745ce18fcfed0b1734e8d6561868a67a368b63b23ed300e199ed5f7e12f1f0de0c0a9730cf06e2b9613c7631b04f8e9ff83ae8917089c0ce701fea4b1601e46cc985156a4ed7bfc6d59", 0x4b}], 0x7, &(0x7f00000059c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01, r9}}}, @rights={{0x20, 0x1, 0x1, [r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r12, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r13, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r14]}}], 0xf0, 0x40}}, {{&(0x7f0000005ac0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000005b40)="88cdc286340d7d306c00b761c178a6f3dc6e87393af1bda2bd4afcc8", 0x1c}, {&(0x7f0000005b80)="cf5dd576ed31ee5a6959ae6b271f6b80e7baa4a4601d09cc82e02177aece1782caedcfa29fbe93f368426f1a64e10a9b775535ede5eb7b7abf3b88bcc89350f32ba3863fa5b8ee099c092ad135c36291b6dca6fb083f90b0a7c347d2e2569080223de8c25a7b40f97ee805fadd5efc4eb67da551bb8c52bf409d838368db8f4fe30105a17d145f5f86a3e4e7e5ca97fad11db72495487384a4357ade7335ede91b25656612a28f46760982c7", 0xac}, {&(0x7f0000005c40)="ed9a3775e5c73f902fe5fde686e4d958f5a84bf7e6113e71aca0a6a0771525783506cf", 0x23}, {&(0x7f0000005c80)="2cdbf4c88fb509f926175e91a2224ac73cccc8ded9b433c992641edd7c599f9fcf78b652a34099559a83204e9f9cadfa36c56cfbbb04da4efcb14ee1706622eb12967a159552320b4abdf70e2b44c549507d9a6081c6c2b0079e2af3a911e08a3b47b8a6956498c4d46cef1ba01d4cbe385f20c52245c117bb9fc9d1b8496955e6b9b4b9995e83879de89c2c601e", 0x8e}, {&(0x7f0000005d40)="66aaa8a3d0a9a989e0a38fef3caba790dee3116326d7d2287a12781feef46ae65c7b99cd1e79e8ab80fb466bcc9aec3d3d2d5cff0f088d4f3702383d4aad9b411ca4c7793ade7f4cedd6ca741f1ad0b7996d5c8600cd9b3f929277b99c2a6633", 0x60}], 0x5, &(0x7f0000008380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r15}}}, @cred={{0x1c}}], 0x58, 0x48801}}], 0x5, 0x50)

00:09:04 executing program 6:
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="f63af272779ae3a4553c2289f328612e53d85bd0a3d9b483ad7cda39a58e8072edd632dd88f4b48829253ef1c4b75d91532a01a23021cd436ad8d91074f3b27be284f9a54b8becbbd7d8152609647a918f4e00362352890a61f0c91962000341788d2990170d038447126213")
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x80, 0x80000001, 0x9, 0x6, 0x80, "2935094658e86fd5cb9cd5e3277e443902c007", 0xfff, 0x1})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x8)
r2 = pidfd_open(0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}, {@debug={'debug', 0x3d, 0x4}}, {@cache_fscache}, {@privport}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@privport}], [{@pcr={'pcr', 0x3d, 0x30}}, {@smackfshat={'smackfshat', 0x3d, '/dev/hpet\x00'}}, {@pcr={'pcr', 0x3d, 0x10}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_lt={'uid<', 0xee01}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x5c2}}]}})
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000440)=0x65c1)
ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000480)={{0x2, 0x80000000}, 0x100, './file0\x00'})
ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000005c0)={0x79, 0x4})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r4=>r0, @out_args}, './file0\x00'})
ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000640)={0x3, 0x8, 0xd8, 0x4})
write$P9_RREADLINK(r0, &(0x7f0000000680)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='net/rt6_stats\x00')
ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000700))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r6, 0xf504, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000ac0)={0x98, 0x0, &(0x7f0000000940)=[@decrefs, @register_looper, @acquire_done={0x40106309, 0x3}, @acquire_done={0x40106309, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/211, 0xd3, 0x1, 0x2b}, @flat=@weak_handle={0x77682a85, 0x10b, 0x3}}, &(0x7f0000000900)={0x0, 0x18, 0x40}}}, @free_buffer, @acquire_done={0x40106309, 0x2}], 0x9a, 0x0, &(0x7f0000000a00)="7d98c90a0eb206df00774dc060b021979d0177b5ac4770a5b08f9d803a20a25be070d56ae21a32a254e16f8a0a4a9e51af92eb859967855c07e25026d807acb81ee8f0da7e29f7d5d9355ab6fa318e283d98c96d2e81b63eb82dd47ccc0eef66dffc5f4ddf3931aacfe8b945f37e5b1dc357adccd8fdca646e3814730860b1b75ef5e420ddbb72cf5450ca1b4af674e22c0effea69bab0c912b4"})
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000b00)={0x2, {0x2, 0x1, 0x4, 0x5, 0xfffa, 0x4}})

00:09:05 executing program 7:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
r1 = signalfd(r0, &(0x7f0000000040)={[0xfff]}, 0x8)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x0, 0x80000})
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, 0x1, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc0}, 0x4154)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, <r2=>0x0})
fcntl$lock(r1, 0x23, &(0x7f0000000280)={0x1, 0x1, 0x9, 0x7, r2})
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000300)={0x2, 0x7, 0x14, &(0x7f00000002c0)=""/20})
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x820}, 0x20040010)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r3, 0x2, 0x1ff, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x20)
pipe2(&(0x7f0000000640)={<r4=>0xffffffffffffffff}, 0x80000)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), r1)
sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r5, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x40800)
r6 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x8, 0x4200)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xa79efb7e6e78c43c}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000a00)={{0x2, 0x1f}, {0x6, 0x8}, 0xf91, 0x1, 0x8})
ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000a80)={0xff, 0xdd7f, 0x1})

[   65.319538] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.321970] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.323968] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.327495] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.329961] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   65.331436] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.342467] Bluetooth: hci0: HCI_REQ-0x0c1a
[   65.428679] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.430672] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.432213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.435843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.437856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   65.439343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.452330] Bluetooth: hci2: HCI_REQ-0x0c1a
[   65.460085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   65.465964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   65.467889] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   65.478433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   65.484957] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   65.509467] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   65.527463] Bluetooth: hci3: HCI_REQ-0x0c1a
[   65.541472] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.543587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.547072] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.548826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   65.552494] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   65.555492] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   65.558063] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.560104] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   65.562662] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   65.565671] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   65.568122] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   65.569404] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   65.571398] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   65.574549] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.575997] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   65.579374] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   65.581538] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   65.582119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   65.588834] Bluetooth: hci1: HCI_REQ-0x0c1a
[   65.591424] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   65.594129] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   65.595546] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   65.596574] Bluetooth: hci5: HCI_REQ-0x0c1a
[   65.601972] Bluetooth: hci7: HCI_REQ-0x0c1a
[   65.618352] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   65.654223] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   65.666944] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   65.684584] Bluetooth: hci6: HCI_REQ-0x0c1a
[   67.394187] Bluetooth: hci0: command 0x0409 tx timeout
[   67.457827] Bluetooth: hci2: command 0x0409 tx timeout
[   67.521782] Bluetooth: hci4: Opcode 0x c03 failed: -110
[   67.586119] Bluetooth: hci3: command 0x0409 tx timeout
[   67.648922] Bluetooth: hci7: command 0x0409 tx timeout
[   67.649086] Bluetooth: hci5: command 0x0409 tx timeout
[   67.651339] Bluetooth: hci1: command 0x0409 tx timeout
[   67.712809] Bluetooth: hci6: command 0x0409 tx timeout
[   69.440780] Bluetooth: hci0: command 0x041b tx timeout
[   69.504797] Bluetooth: hci2: command 0x041b tx timeout
[   69.633854] Bluetooth: hci3: command 0x041b tx timeout
[   69.696826] Bluetooth: hci1: command 0x041b tx timeout
[   69.696875] Bluetooth: hci7: command 0x041b tx timeout
[   69.697571] Bluetooth: hci5: command 0x041b tx timeout
[   69.760804] Bluetooth: hci6: command 0x041b tx timeout
[   71.075422] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   71.082432] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   71.084605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   71.096529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   71.099281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   71.101653] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   71.114799] Bluetooth: hci4: HCI_REQ-0x0c1a
[   71.488780] Bluetooth: hci0: command 0x040f tx timeout
[   71.552792] Bluetooth: hci2: command 0x040f tx timeout
[   71.681808] Bluetooth: hci3: command 0x040f tx timeout
[   71.744774] Bluetooth: hci7: command 0x040f tx timeout
[   71.745239] Bluetooth: hci5: command 0x040f tx timeout
[   71.745629] Bluetooth: hci1: command 0x040f tx timeout
[   71.808848] Bluetooth: hci6: command 0x040f tx timeout
[   73.152896] Bluetooth: hci4: command 0x0409 tx timeout
[   73.536770] Bluetooth: hci0: command 0x0419 tx timeout
[   73.600759] Bluetooth: hci2: command 0x0419 tx timeout
[   73.728748] Bluetooth: hci3: command 0x0419 tx timeout
[   73.792787] Bluetooth: hci1: command 0x0419 tx timeout
[   73.793259] Bluetooth: hci5: command 0x0419 tx timeout
[   73.793671] Bluetooth: hci7: command 0x0419 tx timeout
[   73.856792] Bluetooth: hci6: command 0x0419 tx timeout
[   75.202434] Bluetooth: hci4: command 0x041b tx timeout
[   77.248841] Bluetooth: hci4: command 0x040f tx timeout
[   79.298759] Bluetooth: hci4: command 0x0419 tx timeout
00:10:04 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
setresuid(0x0, 0xee00, 0x0)
setfsuid(0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, 0xee00, r2)
setfsuid(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x100c0b, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@loose}, {@version_9p2000}, {@version_u}], [{@euid_gt}, {@fowner_eq={'fowner', 0x3d, r2}}]}})
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[  123.587538] loop3: detected capacity change from 0 to 40
[  123.687531] audit: type=1400 audit(1664842204.473:7): avc:  denied  { open } for  pid=3660 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  123.690427] audit: type=1400 audit(1664842204.473:8): avc:  denied  { kernel } for  pid=3660 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  123.721437] ------------[ cut here ]------------
[  123.721467] 
[  123.721472] ======================================================
[  123.721478] WARNING: possible circular locking dependency detected
[  123.721485] 6.0.0-rc7-next-20220930 #1 Not tainted
[  123.721497] ------------------------------------------------------
[  123.721502] syz-executor.3/3663 is trying to acquire lock:
[  123.721513] ffffffff853faab8 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  123.721579] 
[  123.721579] but task is already holding lock:
[  123.721584] ffff88800e26f020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  123.721630] 
[  123.721630] which lock already depends on the new lock.
[  123.721630] 
[  123.721635] 
[  123.721635] the existing dependency chain (in reverse order) is:
[  123.721641] 
[  123.721641] -> #3 (&ctx->lock){....}-{2:2}:
[  123.721665]        _raw_spin_lock+0x2a/0x40
[  123.721685]        __perf_event_task_sched_out+0x53b/0x18d0
[  123.721711]        __schedule+0xedd/0x2470
[  123.721735]        schedule+0xda/0x1b0
[  123.721760]        exit_to_user_mode_prepare+0x114/0x1a0
[  123.721781]        syscall_exit_to_user_mode+0x19/0x40
[  123.721804]        do_syscall_64+0x48/0x90
[  123.721835]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  123.721858] 
[  123.721858] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  123.721883]        _raw_spin_lock_nested+0x30/0x40
[  123.721902]        raw_spin_rq_lock_nested+0x1e/0x30
[  123.721925]        task_fork_fair+0x63/0x4d0
[  123.721955]        sched_cgroup_fork+0x3d0/0x540
[  123.721980]        copy_process+0x4183/0x6e20
[  123.721998]        kernel_clone+0xe7/0x890
[  123.722015]        user_mode_thread+0xad/0xf0
[  123.722034]        rest_init+0x24/0x250
[  123.722055]        arch_call_rest_init+0xf/0x14
[  123.722085]        start_kernel+0x4c6/0x4eb
[  123.722113]        secondary_startup_64_no_verify+0xe0/0xeb
[  123.722137] 
[  123.722137] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  123.722162]        _raw_spin_lock_irqsave+0x39/0x60
[  123.722182]        try_to_wake_up+0xab/0x1930
[  123.722206]        up+0x75/0xb0
[  123.722231]        __up_console_sem+0x6e/0x80
[  123.722259]        console_unlock+0x46a/0x590
[  123.722288]        vt_ioctl+0x2822/0x2ca0
[  123.722308]        tty_ioctl+0x785/0x16b0
[  123.722327]        __x64_sys_ioctl+0x19a/0x210
[  123.722350]        do_syscall_64+0x3b/0x90
[  123.722381]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  123.722404] 
[  123.722404] -> #0 ((console_sem).lock){....}-{2:2}:
[  123.722429]        __lock_acquire+0x2a02/0x5e70
[  123.722459]        lock_acquire+0x1a2/0x530
[  123.722487]        _raw_spin_lock_irqsave+0x39/0x60
[  123.722507]        down_trylock+0xe/0x70
[  123.722534]        __down_trylock_console_sem+0x3b/0xd0
[  123.722563]        vprintk_emit+0x16b/0x560
[  123.722593]        vprintk+0x84/0xa0
[  123.722622]        _printk+0xba/0xf1
[  123.722641]        report_bug.cold+0x72/0xab
[  123.722670]        handle_bug+0x3c/0x70
[  123.722700]        exc_invalid_op+0x14/0x50
[  123.722731]        asm_exc_invalid_op+0x16/0x20
[  123.722753]        group_sched_out.part.0+0x2c7/0x460
[  123.722785]        ctx_sched_out+0x8f1/0xc10
[  123.722815]        __perf_event_task_sched_out+0x6d0/0x18d0
[  123.722835]        __schedule+0xedd/0x2470
[  123.722860]        schedule+0xda/0x1b0
[  123.722884]        exit_to_user_mode_prepare+0x114/0x1a0
[  123.722904]        syscall_exit_to_user_mode+0x19/0x40
[  123.722927]        do_syscall_64+0x48/0x90
[  123.722957]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  123.722980] 
[  123.722980] other info that might help us debug this:
[  123.722980] 
[  123.722985] Chain exists of:
[  123.722985]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  123.722985] 
[  123.723012]  Possible unsafe locking scenario:
[  123.723012] 
[  123.723016]        CPU0                    CPU1
[  123.723020]        ----                    ----
[  123.723024]   lock(&ctx->lock);
[  123.723034]                                lock(&rq->__lock);
[  123.723045]                                lock(&ctx->lock);
[  123.723057]   lock((console_sem).lock);
[  123.723067] 
[  123.723067]  *** DEADLOCK ***
[  123.723067] 
[  123.723070] 2 locks held by syz-executor.3/3663:
[  123.723083]  #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  123.723136]  #1: ffff88800e26f020 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  123.723184] 
[  123.723184] stack backtrace:
[  123.723189] CPU: 1 PID: 3663 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1
[  123.723211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  123.723225] Call Trace:
[  123.723231]  <TASK>
[  123.723238]  dump_stack_lvl+0x8b/0xb3
[  123.723275]  check_noncircular+0x263/0x2e0
[  123.723306]  ? format_decode+0x26c/0xb50
[  123.723334]  ? print_circular_bug+0x450/0x450
[  123.723366]  ? simple_strtoul+0x30/0x30
[  123.723395]  ? format_decode+0x26c/0xb50
[  123.723427]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  123.723459]  __lock_acquire+0x2a02/0x5e70
[  123.723498]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  123.723540]  lock_acquire+0x1a2/0x530
[  123.723570]  ? down_trylock+0xe/0x70
[  123.723602]  ? lock_release+0x750/0x750
[  123.723639]  ? vprintk+0x84/0xa0
[  123.723672]  _raw_spin_lock_irqsave+0x39/0x60
[  123.723693]  ? down_trylock+0xe/0x70
[  123.723722]  down_trylock+0xe/0x70
[  123.723752]  ? vprintk+0x84/0xa0
[  123.723782]  __down_trylock_console_sem+0x3b/0xd0
[  123.723814]  vprintk_emit+0x16b/0x560
[  123.723849]  vprintk+0x84/0xa0
[  123.723880]  _printk+0xba/0xf1
[  123.723901]  ? record_print_text.cold+0x16/0x16
[  123.723931]  ? report_bug.cold+0x66/0xab
[  123.723964]  ? group_sched_out.part.0+0x2c7/0x460
[  123.723997]  report_bug.cold+0x72/0xab
[  123.724032]  handle_bug+0x3c/0x70
[  123.724064]  exc_invalid_op+0x14/0x50
[  123.724097]  asm_exc_invalid_op+0x16/0x20
[  123.724120] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  123.724157] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  123.724177] RSP: 0018:ffff8880406ffc48 EFLAGS: 00010006
[  123.724194] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  123.724207] RDX: ffff888017675040 RSI: ffffffff81565dc7 RDI: 0000000000000005
[  123.724221] RBP: ffff888040750000 R08: 0000000000000005 R09: 0000000000000001
[  123.724234] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800e26f000
[  123.724248] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002
[  123.724268]  ? group_sched_out.part.0+0x2c7/0x460
[  123.724305]  ? group_sched_out.part.0+0x2c7/0x460
[  123.724341]  ctx_sched_out+0x8f1/0xc10
[  123.724377]  __perf_event_task_sched_out+0x6d0/0x18d0
[  123.724403]  ? lock_is_held_type+0xd7/0x130
[  123.724429]  ? __perf_cgroup_move+0x160/0x160
[  123.724448]  ? set_next_entity+0x304/0x550
[  123.724481]  ? update_curr+0x267/0x740
[  123.724514]  ? lock_is_held_type+0xd7/0x130
[  123.724540]  __schedule+0xedd/0x2470
[  123.724572]  ? io_schedule_timeout+0x150/0x150
[  123.724602]  ? rcu_read_lock_sched_held+0x3e/0x80
[  123.724639]  schedule+0xda/0x1b0
[  123.724667]  exit_to_user_mode_prepare+0x114/0x1a0
[  123.724689]  syscall_exit_to_user_mode+0x19/0x40
[  123.724715]  do_syscall_64+0x48/0x90
[  123.724747]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  123.724772] RIP: 0033:0x7f0f902edb19
[  123.724786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  123.724806] RSP: 002b:00007f0f8d863218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  123.724835] RAX: 0000000000000001 RBX: 00007f0f90400f68 RCX: 00007f0f902edb19
[  123.724849] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f90400f6c
[  123.724862] RBP: 00007f0f90400f60 R08: 000000000000000e R09: 0000000000000000
[  123.724875] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f0f90400f6c
[  123.724888] R13: 00007ffd8a4a130f R14: 00007f0f8d863300 R15: 0000000000022000
[  123.724911]  </TASK>
[  123.827453] WARNING: CPU: 1 PID: 3663 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  123.828796] Modules linked in:
[  123.829249] CPU: 1 PID: 3663 Comm: syz-executor.3 Not tainted 6.0.0-rc7-next-20220930 #1
[  123.830403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  123.832014] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  123.832838] Code: 5e 41 5f e9 8b ae ef ff e8 86 ae ef ff 65 8b 1d 0b 18 ac 7e 31 ff 89 de e8 26 ab ef ff 85 db 0f 84 8a 00 00 00 e8 69 ae ef ff <0f> 0b e9 a5 fe ff ff e8 5d ae ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  123.835458] RSP: 0018:ffff8880406ffc48 EFLAGS: 00010006
[  123.836234] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  123.837278] RDX: ffff888017675040 RSI: ffffffff81565dc7 RDI: 0000000000000005
[  123.838318] RBP: ffff888040750000 R08: 0000000000000005 R09: 0000000000000001
[  123.839368] R10: 0000000000000000 R11: ffffffff865b405b R12: ffff88800e26f000
[  123.840396] R13: ffff88806cf3d2c0 R14: ffffffff8547d000 R15: 0000000000000002
[  123.841419] FS:  00007f0f8d863700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  123.842538] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  123.843314] CR2: 0000558f20a0c408 CR3: 000000000dcca000 CR4: 0000000000350ee0
[  123.844289] Call Trace:
[  123.844652]  <TASK>
[  123.844982]  ctx_sched_out+0x8f1/0xc10
[  123.845541]  __perf_event_task_sched_out+0x6d0/0x18d0
[  123.846272]  ? lock_is_held_type+0xd7/0x130
[  123.846880]  ? __perf_cgroup_move+0x160/0x160
[  123.847499]  ? set_next_entity+0x304/0x550
[  123.848095]  ? update_curr+0x267/0x740
[  123.848663]  ? lock_is_held_type+0xd7/0x130
[  123.849275]  __schedule+0xedd/0x2470
[  123.849809]  ? io_schedule_timeout+0x150/0x150
[  123.850462]  ? rcu_read_lock_sched_held+0x3e/0x80
[  123.851143]  schedule+0xda/0x1b0
[  123.851638]  exit_to_user_mode_prepare+0x114/0x1a0
[  123.852350]  syscall_exit_to_user_mode+0x19/0x40
[  123.853013]  do_syscall_64+0x48/0x90
[  123.853562]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  123.854274] RIP: 0033:0x7f0f902edb19
[  123.854805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  123.857284] RSP: 002b:00007f0f8d863218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  123.858327] RAX: 0000000000000001 RBX: 00007f0f90400f68 RCX: 00007f0f902edb19
[  123.859296] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f90400f6c
[  123.860252] RBP: 00007f0f90400f60 R08: 000000000000000e R09: 0000000000000000
[  123.861244] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f0f90400f6c
[  123.862205] R13: 00007ffd8a4a130f R14: 00007f0f8d863300 R15: 0000000000022000
[  123.863185]  </TASK>
[  123.863524] irq event stamp: 3314
[  123.864001] hardirqs last  enabled at (3313): [<ffffffff8133e829>] exit_to_user_mode_prepare+0x109/0x1a0
[  123.865299] hardirqs last disabled at (3314): [<ffffffff8425caa5>] __schedule+0x1225/0x2470
[  123.866461] softirqs last  enabled at (3158): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  123.867646] softirqs last disabled at (3151): [<ffffffff8116fa0b>] __irq_exit_rcu+0x11b/0x180
[  123.868839] ---[ end trace 0000000000000000 ]---
[  124.433288] syz-executor.3: attempt to access beyond end of device
[  124.433288] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[  124.434379] Buffer I/O error on dev loop3, logical block 31, lost async page write
[  124.527841] loop3: detected capacity change from 0 to 40
00:10:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
setresuid(0x0, 0xee00, 0x0)
setfsuid(0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, 0xee00, r2)
setfsuid(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x100c0b, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@loose}, {@version_9p2000}, {@version_u}], [{@euid_gt}, {@fowner_eq={'fowner', 0x3d, r2}}]}})
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[  124.568014] syz-executor.3: attempt to access beyond end of device
[  124.568014] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[  124.569016] Buffer I/O error on dev loop3, logical block 31, lost async page write
00:10:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
setresuid(0x0, 0xee00, 0x0)
setfsuid(0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, 0xee00, r2)
setfsuid(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x100c0b, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@loose}, {@version_9p2000}, {@version_u}], [{@euid_gt}, {@fowner_eq={'fowner', 0x3d, r2}}]}})
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[  124.678286] loop3: detected capacity change from 0 to 40
[  124.724802] syz-executor.3: attempt to access beyond end of device
[  124.724802] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[  124.726617] Buffer I/O error on dev loop3, logical block 31, lost async page write
00:10:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
setresuid(0x0, 0xee00, 0x0)
setfsuid(0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, 0xee00, r2)
setfsuid(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x100c0b, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@loose}, {@version_9p2000}, {@version_u}], [{@euid_gt}, {@fowner_eq={'fowner', 0x3d, r2}}]}})
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r3, r0, 0x0, 0xfffffdef)

[  124.823742] loop3: detected capacity change from 0 to 40
[  124.851841] syz-executor.3: attempt to access beyond end of device
[  124.851841] loop3: rw=2049, sector=124, nr_sectors = 4 limit=40
[  124.853770] Buffer I/O error on dev loop3, logical block 31, lost async page write
00:10:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
setresuid(0x0, 0xee00, 0x0)
setfsuid(0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, 0xee00, r2)
setfsuid(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x100c0b, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@loose}, {@version_9p2000}, {@version_u}], [{@euid_gt}, {@fowner_eq={'fowner', 0x3d, r2}}]}})
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

[  124.969678] loop3: detected capacity change from 0 to 40
[  125.010672] kworker/u4:7: attempt to access beyond end of device
[  125.010672] loop3: rw=1, sector=124, nr_sectors = 4 limit=40
[  125.011630] Buffer I/O error on dev loop3, logical block 31, lost async page write
00:10:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
setresuid(0x0, 0xee00, 0x0)
setfsuid(0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, 0xee00, r2)
setfsuid(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x100c0b, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@loose}, {@version_9p2000}, {@version_u}], [{@euid_gt}, {@fowner_eq={'fowner', 0x3d, r2}}]}})
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
write$binfmt_aout(r3, &(0x7f0000001180)=ANY=[], 0x220)

[  125.035535] loop3: detected capacity change from 0 to 40
[  125.120262] kworker/u4:4: attempt to access beyond end of device
[  125.120262] loop3: rw=1, sector=124, nr_sectors = 4 limit=40
[  125.121275] Buffer I/O error on dev loop3, logical block 31, lost async page write
00:10:05 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
setresuid(0x0, 0xee00, 0x0)
setfsuid(0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, 0xee00, r2)
setfsuid(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x100c0b, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@loose}, {@version_9p2000}, {@version_u}], [{@euid_gt}, {@fowner_eq={'fowner', 0x3d, r2}}]}})
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)

[  125.152329] loop3: detected capacity change from 0 to 40
[  125.225403] kworker/u4:8: attempt to access beyond end of device
00:10:06 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2800}], 0x0, &(0x7f0000000140)=ANY=[])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0)
setresuid(0x0, 0xee00, 0x0)
setfsuid(0x0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setresuid(0x0, 0xee00, r2)
setfsuid(r2)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000180), 0x100c0b, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@version_L}, {@loose}, {@version_9p2000}, {@version_u}], [{@euid_gt}, {@fowner_eq={'fowner', 0x3d, r2}}]}})
pwrite64(r1, &(0x7f00000000c0)='9', 0x1, 0x8040000)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x0, 0x3ff})
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0xa015000)

[  125.225403] loop3: rw=1, sector=124, nr_sectors = 4 limit=40
[  125.227398] Buffer I/O error on dev loop3, logical block 31, lost async page write
[  127.186456] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  127.187591] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  127.189606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  127.191374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  127.192799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  127.194051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  127.196876] Bluetooth: hci0: HCI_REQ-0x0c1a
[  129.217154] Bluetooth: hci0: command 0x0409 tx timeout
[  129.408721] Bluetooth: hci3: Opcode 0x c03 failed: -110
[  129.408788] Bluetooth: hci5: Opcode 0x c03 failed: -110
[  129.410069] Bluetooth: hci2: Opcode 0x c03 failed: -110
[  129.410903] Bluetooth: hci1: Opcode 0x c03 failed: -110
[  129.472727] Bluetooth: hci6: Opcode 0x c03 failed: -110
[  131.264757] Bluetooth: hci0: command 0x041b tx timeout
[  133.313442] Bluetooth: hci0: command 0x040f tx timeout
[  133.696814] Bluetooth: hci1: Opcode 0x c03 failed: -110

VM DIAGNOSIS:
00:10:04  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=ffff8880163ef720 RCX=0000000000000001 RDX=1ffff11002c7dee5
RSI=ffff8880163efdf8 RDI=ffff8880163ef728 RBP=ffff8880163efdf8 RSP=ffff8880163ef668
R8 =ffffffff85ed0d2a R9 =ffffffff85ed0d2e R10=ffffed1002c7def1 R11=000000000003603d
R12=0000000000000008 R13=ffff8880163ef780 R14=ffff8880163ef720 R15=ffffffff85ed0d2f
RIP=ffffffff8111a045 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f229f41427c CR3=000000002fd56000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 756e696c2d34365f 3638782f62696c2f
YMM01=0000000000000000 0000000000000000 2e6f747079726362 696c2f756e672d78
YMM02=0000000000000000 0000000000000000 00312e312e6f732e 6f74707972636269
YMM03=0000000000000000 0000000000000000 6c2f756e672d7875 6e696c2d34365f36
YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000075 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff8880406ff690
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000075 R11=0000000000000001
R12=0000000000000075 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0
RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f0f8d863700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000558f20a0c408 CR3=000000000dcca000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM03=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000