
Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:28199' (ECDSA) to the list of known hosts.
2022/10/07 00:02:27 fuzzer started
2022/10/07 00:02:27 dialing manager at localhost:37161
syzkaller login: [   38.608087] cgroup: Unknown subsys name 'net'
[   38.708307] cgroup: Unknown subsys name 'rlimit'
2022/10/07 00:02:45 syscalls: 2215
2022/10/07 00:02:45 code coverage: enabled
2022/10/07 00:02:45 comparison tracing: enabled
2022/10/07 00:02:45 extra coverage: enabled
2022/10/07 00:02:45 setuid sandbox: enabled
2022/10/07 00:02:45 namespace sandbox: enabled
2022/10/07 00:02:45 Android sandbox: enabled
2022/10/07 00:02:45 fault injection: enabled
2022/10/07 00:02:45 leak checking: enabled
2022/10/07 00:02:45 net packet injection: enabled
2022/10/07 00:02:45 net device setup: enabled
2022/10/07 00:02:45 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/07 00:02:45 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/07 00:02:45 USB emulation: enabled
2022/10/07 00:02:45 hci packet injection: enabled
2022/10/07 00:02:45 wifi device emulation: failed to parse kernel version (6.0.0-next-20221006                                              )
2022/10/07 00:02:45 802.15.4 emulation: enabled
2022/10/07 00:02:45 fetching corpus: 50, signal 27594/29326 (executing program)
2022/10/07 00:02:45 fetching corpus: 100, signal 38538/41775 (executing program)
2022/10/07 00:02:45 fetching corpus: 150, signal 44674/49321 (executing program)
2022/10/07 00:02:45 fetching corpus: 200, signal 50655/56619 (executing program)
2022/10/07 00:02:45 fetching corpus: 250, signal 55006/62214 (executing program)
2022/10/07 00:02:45 fetching corpus: 300, signal 59488/67867 (executing program)
2022/10/07 00:02:45 fetching corpus: 350, signal 62019/71616 (executing program)
2022/10/07 00:02:45 fetching corpus: 400, signal 69591/79999 (executing program)
2022/10/07 00:02:45 fetching corpus: 450, signal 72160/83622 (executing program)
2022/10/07 00:02:46 fetching corpus: 500, signal 74371/86890 (executing program)
2022/10/07 00:02:46 fetching corpus: 550, signal 76660/90164 (executing program)
2022/10/07 00:02:46 fetching corpus: 600, signal 78304/92889 (executing program)
2022/10/07 00:02:46 fetching corpus: 650, signal 80722/96239 (executing program)
2022/10/07 00:02:46 fetching corpus: 700, signal 83456/99768 (executing program)
2022/10/07 00:02:46 fetching corpus: 750, signal 85202/102424 (executing program)
2022/10/07 00:02:46 fetching corpus: 800, signal 87845/105789 (executing program)
2022/10/07 00:02:46 fetching corpus: 850, signal 89224/108024 (executing program)
2022/10/07 00:02:46 fetching corpus: 900, signal 91478/110985 (executing program)
2022/10/07 00:02:46 fetching corpus: 950, signal 94690/114740 (executing program)
2022/10/07 00:02:47 fetching corpus: 1000, signal 96120/116932 (executing program)
2022/10/07 00:02:47 fetching corpus: 1050, signal 97346/118928 (executing program)
2022/10/07 00:02:47 fetching corpus: 1100, signal 99492/121645 (executing program)
2022/10/07 00:02:47 fetching corpus: 1150, signal 102370/124879 (executing program)
2022/10/07 00:02:47 fetching corpus: 1200, signal 103942/127028 (executing program)
2022/10/07 00:02:47 fetching corpus: 1250, signal 105395/129111 (executing program)
2022/10/07 00:02:47 fetching corpus: 1300, signal 108358/132212 (executing program)
2022/10/07 00:02:47 fetching corpus: 1350, signal 110622/134742 (executing program)
2022/10/07 00:02:47 fetching corpus: 1400, signal 112919/137283 (executing program)
2022/10/07 00:02:48 fetching corpus: 1450, signal 114011/138878 (executing program)
2022/10/07 00:02:48 fetching corpus: 1500, signal 115756/140919 (executing program)
2022/10/07 00:02:48 fetching corpus: 1550, signal 117192/142753 (executing program)
2022/10/07 00:02:48 fetching corpus: 1600, signal 118494/144463 (executing program)
2022/10/07 00:02:48 fetching corpus: 1650, signal 119597/145985 (executing program)
2022/10/07 00:02:48 fetching corpus: 1700, signal 120412/147330 (executing program)
2022/10/07 00:02:48 fetching corpus: 1750, signal 122112/149270 (executing program)
2022/10/07 00:02:48 fetching corpus: 1800, signal 123640/151018 (executing program)
2022/10/07 00:02:48 fetching corpus: 1850, signal 125383/152880 (executing program)
2022/10/07 00:02:48 fetching corpus: 1900, signal 126337/154181 (executing program)
2022/10/07 00:02:49 fetching corpus: 1950, signal 127979/155931 (executing program)
2022/10/07 00:02:49 fetching corpus: 2000, signal 129947/157773 (executing program)
2022/10/07 00:02:49 fetching corpus: 2050, signal 131224/159178 (executing program)
2022/10/07 00:02:49 fetching corpus: 2100, signal 132264/160440 (executing program)
2022/10/07 00:02:49 fetching corpus: 2150, signal 133397/161768 (executing program)
2022/10/07 00:02:49 fetching corpus: 2200, signal 134660/163192 (executing program)
2022/10/07 00:02:49 fetching corpus: 2250, signal 135822/164493 (executing program)
2022/10/07 00:02:49 fetching corpus: 2300, signal 136977/165719 (executing program)
2022/10/07 00:02:49 fetching corpus: 2350, signal 137944/166835 (executing program)
2022/10/07 00:02:50 fetching corpus: 2400, signal 139670/168381 (executing program)
2022/10/07 00:02:50 fetching corpus: 2450, signal 140846/169649 (executing program)
2022/10/07 00:02:50 fetching corpus: 2500, signal 142082/170862 (executing program)
2022/10/07 00:02:50 fetching corpus: 2550, signal 142898/171785 (executing program)
2022/10/07 00:02:50 fetching corpus: 2600, signal 143669/172739 (executing program)
2022/10/07 00:02:50 fetching corpus: 2650, signal 145548/174147 (executing program)
2022/10/07 00:02:50 fetching corpus: 2700, signal 146874/175350 (executing program)
2022/10/07 00:02:50 fetching corpus: 2750, signal 147415/176151 (executing program)
2022/10/07 00:02:50 fetching corpus: 2800, signal 148054/177004 (executing program)
2022/10/07 00:02:50 fetching corpus: 2850, signal 148954/177948 (executing program)
2022/10/07 00:02:51 fetching corpus: 2900, signal 149613/178744 (executing program)
2022/10/07 00:02:51 fetching corpus: 2950, signal 149899/179390 (executing program)
2022/10/07 00:02:51 fetching corpus: 3000, signal 150626/180184 (executing program)
2022/10/07 00:02:51 fetching corpus: 3050, signal 151555/181042 (executing program)
2022/10/07 00:02:51 fetching corpus: 3100, signal 152057/181731 (executing program)
2022/10/07 00:02:51 fetching corpus: 3150, signal 153084/182608 (executing program)
2022/10/07 00:02:51 fetching corpus: 3200, signal 153740/183333 (executing program)
2022/10/07 00:02:51 fetching corpus: 3250, signal 154585/184065 (executing program)
2022/10/07 00:02:51 fetching corpus: 3300, signal 155266/184801 (executing program)
2022/10/07 00:02:52 fetching corpus: 3350, signal 156564/185702 (executing program)
2022/10/07 00:02:52 fetching corpus: 3400, signal 157339/186388 (executing program)
2022/10/07 00:02:52 fetching corpus: 3450, signal 157798/186976 (executing program)
2022/10/07 00:02:52 fetching corpus: 3500, signal 158279/187562 (executing program)
2022/10/07 00:02:52 fetching corpus: 3550, signal 159332/188285 (executing program)
2022/10/07 00:02:52 fetching corpus: 3600, signal 159675/188814 (executing program)
2022/10/07 00:02:52 fetching corpus: 3650, signal 161116/189620 (executing program)
2022/10/07 00:02:52 fetching corpus: 3700, signal 161670/190172 (executing program)
2022/10/07 00:02:52 fetching corpus: 3750, signal 162122/190648 (executing program)
2022/10/07 00:02:52 fetching corpus: 3800, signal 162880/191196 (executing program)
2022/10/07 00:02:53 fetching corpus: 3850, signal 163499/191743 (executing program)
2022/10/07 00:02:53 fetching corpus: 3900, signal 164305/192266 (executing program)
2022/10/07 00:02:53 fetching corpus: 3950, signal 165191/192815 (executing program)
2022/10/07 00:02:53 fetching corpus: 4000, signal 165620/193236 (executing program)
2022/10/07 00:02:53 fetching corpus: 4050, signal 166189/193647 (executing program)
2022/10/07 00:02:53 fetching corpus: 4100, signal 167482/194209 (executing program)
2022/10/07 00:02:53 fetching corpus: 4150, signal 167874/194653 (executing program)
2022/10/07 00:02:53 fetching corpus: 4200, signal 168766/195144 (executing program)
2022/10/07 00:02:53 fetching corpus: 4250, signal 169264/195551 (executing program)
2022/10/07 00:02:53 fetching corpus: 4300, signal 170021/195967 (executing program)
2022/10/07 00:02:53 fetching corpus: 4350, signal 170880/196372 (executing program)
2022/10/07 00:02:54 fetching corpus: 4400, signal 171353/196755 (executing program)
2022/10/07 00:02:54 fetching corpus: 4450, signal 172335/197172 (executing program)
2022/10/07 00:02:54 fetching corpus: 4500, signal 172967/197514 (executing program)
2022/10/07 00:02:54 fetching corpus: 4550, signal 173757/197846 (executing program)
2022/10/07 00:02:54 fetching corpus: 4600, signal 174639/198201 (executing program)
2022/10/07 00:02:54 fetching corpus: 4650, signal 175376/198506 (executing program)
2022/10/07 00:02:54 fetching corpus: 4700, signal 176233/198791 (executing program)
2022/10/07 00:02:54 fetching corpus: 4750, signal 176684/199083 (executing program)
2022/10/07 00:02:55 fetching corpus: 4800, signal 177458/199350 (executing program)
2022/10/07 00:02:55 fetching corpus: 4850, signal 177960/199587 (executing program)
2022/10/07 00:02:55 fetching corpus: 4900, signal 178509/199895 (executing program)
2022/10/07 00:02:55 fetching corpus: 4950, signal 179519/200136 (executing program)
2022/10/07 00:02:55 fetching corpus: 5000, signal 179777/200188 (executing program)
2022/10/07 00:02:55 fetching corpus: 5050, signal 180204/200189 (executing program)
2022/10/07 00:02:55 fetching corpus: 5100, signal 180787/200192 (executing program)
2022/10/07 00:02:55 fetching corpus: 5150, signal 181040/200192 (executing program)
2022/10/07 00:02:55 fetching corpus: 5200, signal 181370/200192 (executing program)
2022/10/07 00:02:55 fetching corpus: 5250, signal 181714/200192 (executing program)
2022/10/07 00:02:55 fetching corpus: 5300, signal 182058/200196 (executing program)
2022/10/07 00:02:55 fetching corpus: 5350, signal 182630/200196 (executing program)
2022/10/07 00:02:56 fetching corpus: 5371, signal 182692/200196 (executing program)
2022/10/07 00:02:56 fetching corpus: 5371, signal 182692/200196 (executing program)
2022/10/07 00:02:58 starting 8 fuzzer processes
00:02:58 executing program 0:
ioctl(0xffffffffffffffff, 0xba, &(0x7f0000000000)="fe996c6d201cb8b304770bc7cf5b69a62eea1f4e4f342e8b8a4e95f54593e17094228295466ee725bd16fca33dcb72d17bb970724829ebdff564e35fa8aa9749beeb8bfa6cbdfe4f1ec154463ece10498b1eb2d9a0d85dd30ed7c028afe85a6987381edca63caa7a0a787af0361f49c6cffab1413c4a4871cfc889ace9753b48164c66308d845b80fdfcda7b03322ade3c5e8e1bf74b75390c20520676b8b7a1b6719222b6b6cafd16cd466770b6")
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x248, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x1e8, 0x4, 0x0, 0x1, [{0x9c, 0x1, 0x0, 0x1, [@queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3f}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6f98}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}]}}, @objref={{0xb}, @void}, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0xb94339e3fd50f70f}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}, @meta={{0x9}, @void}]}, {0x10, 0x1, 0x0, 0x1, [@target={{0xb}, @void}]}, {0x50, 0x1, 0x0, 0x1, [@osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_OSF_DREG={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x40}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}]}, {0x38, 0x1, 0x0, 0x1, [@counter={{0xc}, @void}, @notrack={{0xc}, @void}, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}]}, {0x3c, 0x1, 0x0, 0x1, [@socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x8}]}}]}, {0x74, 0x1, 0x0, 0x1, [@lookup={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xe}]}}, @match={{0xa}, @void}, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6657}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}]}}]}]}, @NFTA_RULE_USERDATA={0x31, 0x7, 0x1, 0x0, "69f43602d6d533998ce0e19a686dd9a756acb968f179745f778906d37c497e5fca3b4753622d180c84baad2511"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x248}, 0x1, 0x0, 0x0, 0x408c}, 0x20008080)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x1, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0xc006)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000500)=0x40)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000540)={{}, 0x800, 0x7, 0x3})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x20, 0xb2, 0x35, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x0, 0x700, 0x4, 0x5}})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000640)=0x101, 0x2)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000680)={0x2, 0x2, 0xd, 0xa801, 0xa, [{0x0, 0x9, 0x1, '\x00', 0x6}, {0xffffffff, 0x7, 0x2, '\x00', 0x1205}, {0x4, 0x0, 0x7f, '\x00', 0x200}, {0x2, 0x0, 0x3ec, '\x00', 0x1}, {0x3, 0x7f, 0x401, '\x00', 0x1806}, {0x8001, 0x9, 0x401, '\x00', 0x3000}, {0x3, 0x1, 0x5, '\x00', 0x200}, {0x1, 0x4, 0x20, '\x00', 0x1080}, {0x149c400000, 0x4, 0xffffffffffffffff, '\x00', 0x800}, {0xaad8, 0x7, 0x9}]})
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3f}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4044010)
r0 = syz_open_procfs(0x0, &(0x7f0000000a40)='net/unix\x00')
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0xcc800)
openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0x301000, 0x101)
r1 = syz_mount_image$vfat(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0xffffffff, 0x2, &(0x7f0000000d80)=[{&(0x7f0000000c40)="3ea4f7155cb0485dfbaa12b46039b4d697e4e699521004f75d46583127d46105ecb43ecf5ae8ca4549135216c9a1506f4457f282070677ecb2ae62c2ffb5bfff0b9ee7fea260b31de7d0b49a1213cdcb5e09ca8d831e56bc01c60c8cd7d9f0c71cca8474945d6ba38559393f191269c8995afaf72c5cef96978ebb76028808af4519650b786caca433fde16b2b59dd99480cb2b475c5a499f3026fdf2f35", 0x9e}, {&(0x7f0000000d00)="89e84c80562519881b2ae9addb3e6d5821ae227aa132bf0c98f110ad29f23369d2fc30b190d00ba0a1f39a73e12510ebedef7173908087c8b42be3bc6f571b212ec8", 0x42, 0x96f3}], 0x90024, &(0x7f0000000dc0)={[{@shortname_win95}], [{@subj_user={'subj_user', 0x3d, 'meta\x00'}}, {@pcr={'pcr', 0x3d, 0x2}}, {@smackfshat}, {@fsname={'fsname', 0x3d, 'syz2\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'syztnl1\x00'}}, {@fowner_lt={'fowner<', 0xee01}}]})
r2 = openat(r1, &(0x7f0000000e80)='./file0\x00', 0x2, 0x1)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000ec0), 0x781180, 0x0)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000001240)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f0000000f40)={0x284, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ID={0x19, 0x3, "071bc7364a99310ff3d49406cb43578a9bb5d84886"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x98, 0x3, "6a7a0ad3bc9f582deb09c726dea36702241e091a62dd88cfd8d221a4cb3dbf978597b255a234b09375939e82e58e127cf1396db428ca1ccd2212cb9ec488b9ed4b64f29f4df1e17c88f080fc5ebc6f238b6f08ee3ff91487a85e93f4f023d0d16a25b29d3ba8d9235a5eb0fce9df4964d2180067ac834883d823ebfe23fec0e557201ff4b763d13ac74022ee5921f85e897eff9f"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "950045d9c1ee33a30979d74b7afc6ca1c73504905a53b13b7ee8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "fe7f434b22072b1ce987a41fb40c1a042f602a4fbef2d2e0"}}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2fa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3cd}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x398d18a0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4001}, 0x40001)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044054}, 0x40000)
r4 = dup2(0xffffffffffffffff, r2)
mount$9p_fd(0x0, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0), 0x1868809, &(0x7f0000001400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@mmap}, {@cache_fscache}, {@version_L}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0x8001}}, {@obj_user={'obj_user', 0x3d, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {@fsmagic={'fsmagic', 0x3d, 0x7fffffff}}, {@fsname={'fsname', 0x3d, 'smackfshat'}}]}})

00:02:58 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x8000)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0xc0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1a}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc2)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20048081)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan4\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008080)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x6000040}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x90111030}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r1, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x81}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x800)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r6)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x1c}}, 0x881)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r6)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r10, 0xc25ed4c62255590c, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfc000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x40044)

00:02:58 executing program 2:
ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000000))
connect(0xffffffffffffffff, &(0x7f0000000040)=@generic={0x26, "925a046a146c2d9002b38931c5c14b68ca9258de9158235f235caa7c8851c14e1106c8343243bbac1db8b39482f7f40f7af2cb64c70e76b93424bf0da03ca39e7999ccc431dde636e9e4886adc4c7671785cc1262c56960644009a99543204e2be969e2949c0812723cdcb49898e8ade821f8d709af2c0d6b0702c174547"}, 0x80)
lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x4, 0x6, 0x201, 0x0, 0x0, {0xb, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4004)
r0 = syz_open_dev$vcsa(&(0x7f0000000400), 0x96, 0x100)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000440)={{0x0, 0x38, 0x5676bc82, 0x7, 0x2, 0xffffffff, 0x5, 0x9, 0x8, 0xfffffffb, 0x7, 0x7, 0x1000, 0x0, 0x7f}})
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000001440))
getresuid(&(0x7f00000019c0)=<r1=>0x0, &(0x7f0000001a00)=<r2=>0x0, &(0x7f0000001a40))
r3 = syz_mount_image$iso9660(&(0x7f0000001480), &(0x7f00000014c0)='./file0\x00', 0x2, 0x2, &(0x7f0000001580)=[{&(0x7f0000001500)="d7f836e2c3af69ec885553c45892f54cef9aae7de3ac1893a4a5f577968cda35", 0x20, 0x2}, {&(0x7f0000001540)="c09134c74d0f5cf67358f8022d2202d8", 0x10, 0xd2}], 0x40028, &(0x7f0000001a80)={[{@cruft}, {@nocompress}, {@map_normal}, {@dmode={'dmode', 0x3d, 0x4}}, {@cruft}, {@gid={'gid', 0x3d, 0xee01}}, {@hide}, {}, {@map_off}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@euid_gt={'euid>', r1}}, {@permit_directio}]})
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000001b40)={{0x1, 0x1, 0x18, <r4=>r3, {0x1, 0xfff}}, './file0\x00'})
ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000001b80)={'geneve0\x00', 0xfff})
r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001bc0), 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x14412100}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x31, 0x7, 0x1, 0x0, "7db2f323bf5588df825baa48c6f6df09a9babbcab80c9334dc8031cf6174d4521ce843fe603929ca23b5eec014"}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a2}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@rt={{0x7}, @void}, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}]}, {0x44, 0x1, 0x0, 0x1, [@counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}, @dynset={{0xb}, @void}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc1}, 0x5adfe4e4a508d3e5)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001e40), r0)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000002000)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x12c, r6, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2f4f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3d}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x13d2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6ab2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x2004cc10}, 0x20000040)
fallocate(r0, 0x10, 0x100000000, 0x100000001)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000002200)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000021c0)={&(0x7f0000002080)={0x134, r6, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x18}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1b}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x43}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x134}}, 0x8000)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002240)={{0x0, 0x0, 0x0, r2, 0xee01, 0x10, 0x8}, 0x0, 0x0, 0x8, 0x6, 0x4, 0xcbbc, 0x100000001, 0x1ff, 0xbb, 0xffff, 0xffffffffffffffff, 0xffffffffffffffff})

00:02:58 executing program 3:
pidfd_send_signal(0xffffffffffffffff, 0x6c13, &(0x7f0000000000)={0x1b, 0xfffffffd, 0x401}, 0x0)
r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000000c0))
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)
r1 = dup2(r0, r0)
ioctl$CDROMEJECT(r1, 0x5309)
ioctl$CDROMREADMODE2(r1, 0x530c, &(0x7f0000000100)={0x6a, 0x81, 0x7, 0x8e, 0x8, 0xff})
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000b80))
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000bc0))
fcntl$getflags(r1, 0xb)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000c00))
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000c40)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, '.\x00'})
finit_module(r2, &(0x7f0000000c80)='net_prio.ifpriomap\x00', 0x1)
r3 = memfd_secret(0x0)
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000cc0)={0x8, 0x1b5b0766, 0x5, 0x9, 0x4, [{0x100, 0x3, 0x80000001}, {0x2, 0x7, 0x80000001, '\x00', 0x80}, {0xfffffffffffffffe, 0x9, 0x44, '\x00', 0x1088}, {0x1000, 0x7ff, 0x100, '\x00', 0x900}]})
r4 = dup(r2)
ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0)
fcntl$setstatus(r0, 0x4, 0x92a32056eeb892b8)
r5 = syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x3ff, 0x3, &(0x7f0000001000)=[{&(0x7f0000000e40)="80e7ebfe98dac442482c3020bc6a7fd84ffdf151898975948c0721f47eed1a376418", 0x22, 0x1}, {&(0x7f0000000e80)="60612f865487fe0397641a68a916932925a24d07bbe1e8322f6a47ab2b69a44fdf69ede269e6f73257b296982ef33258842d58cbc1b9a35c5c34eb00379f00dbf658ecfab65382f46b82e2844cfe6c49f9211966318097adcdfa1a6d00f8f9135cd7c37d32750588214388b4cf36662626a743b61d450d373024633fa0122c8bb9e377d043318f8f36614a08506f665c9d90e34f3dfbd6", 0x97, 0x7}, {&(0x7f0000000f40)="5593b0ce0535d7e4b70749ef971ef90123867fd95058db031c14cdac1afe2b74fb4d5e3c358213fcb4bafcac7bd37c7d3911fb76e1b475f45bfa7c965f126df6710594fc98d9835bda3e815ecca48d0903e2b6c9ffc4127d30d15b008e32c46e71885962ecfee9566978c4a88d5e5a1af84ab58a6b493ec8a8ffb5ee39b94f5745261ee929bbbc49753242b6", 0x8c, 0x200}], 0x0, &(0x7f0000001080)={[{@mode={'mode', 0x3d, 0x200}}, {@map_off}, {@utf8}, {@nocompress}], [{@audit}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@hash}, {@context={'context', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, 'net_prio.ifpriomap\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x30, 0x38, 0x65, 0x32, 0x62, 0x39, 0x39], 0x2d, [0x33, 0x63, 0x33, 0x3d], 0x2d, [0x36, 0x64, 0x63, 0x32], 0x2d, [0x39, 0x0, 0x31, 0x36], 0x2d, [0x30, 0x65, 0x32, 0x62, 0x37, 0x64, 0x30, 0x66]}}}]})
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0)

[   66.793542] audit: type=1400 audit(1665100978.897:6): avc:  denied  { execmem } for  pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
00:02:58 executing program 6:
ptrace$getsig(0x4202, 0x0, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=<r0=>0x0)
ptrace$getsig(0x4202, r0, 0x5, &(0x7f00000000c0))
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000095}, 0x4000000)
sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}]}, 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x400a0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/228, 0xe4}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {<r1=>0x0}}}], 0x20}, 0x40002002)
ptrace$getsig(0x4202, r1, 0x1, &(0x7f0000000540))
ptrace$getsig(0x4202, r0, 0x3, &(0x7f00000005c0))
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x20004801)
ptrace$setsig(0x4203, r0, 0x1f, &(0x7f0000000740)={0x3d, 0x800, 0x80})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000007c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x9}}, './file0\x00'})
pidfd_send_signal(r2, 0x25, &(0x7f0000000800)={0x39, 0x80, 0x7}, 0x0)
r3 = gettid()
ptrace$getsig(0x4202, r3, 0xffff, &(0x7f0000000880))
ptrace$setregs(0xd, r0, 0x8, &(0x7f0000000900)="486d0729457f8de1c21029b4eba9cc99c90c2de7d3078ee3f820cbc8bfac6a901528b4bd76ed8f6a0da401e6e80f717c29a3dc8301fea3ad143b9b08be78903cee04a9cb05aed0f6a1e211db12c9d4b09caaadab292dc38f5bfc475a0283c85d2d4297260e0434fd199d53f402eec3cddc3a8c503b55923c2f126795761c3860954cd410f9e97865d87da9d5d24b29c02fe1bfb8456a6911e8651c0bd84300bd980afe0b62ef4a8e36dee9f32d52decf2ef1a9c6cb9478778d9921b3ed8fc463762bb5a62b57b69068b704b9ff9298335f9c7dc57f1d4f8a4ce8a8536a0c92")
clock_gettime(0x0, &(0x7f0000000a00)={<r4=>0x0, <r5=>0x0})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a80)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000a40)={r4, r5+10000000}, 0x1, 0x1}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, <r6=>r2}, './file0\x00'})
r7 = accept4(r6, &(0x7f0000000b00)=@alg, &(0x7f0000000b80)=0x80, 0x0)
ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000bc0)={0xb062, 0xfffffffeffffffff, 0x7fffffff})

00:02:58 executing program 5:
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x2de19070, 0x1ff, 0xfffffffffffffffe, 0x2, 0xec9c, 0x3})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/socket\x00')
ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000080)={0x0, 0x9, 0x8, 0xff})
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
statx(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x400)
fsetxattr$system_posix_acl(r1, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x8}, [{0x2, 0x5}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4, r2}, {0x2, 0x8, r3}, {0x2, 0x3, 0xee00}, {0x2, 0x0, 0xee00}], {}, [{0x8, 0x7, r4}], {0x10, 0x1}, {0x20, 0x4}}, 0x64, 0x1)
pread64(r1, &(0x7f00000004c0)=""/4096, 0x1000, 0x4)
r5 = syz_io_uring_complete(0x0)
r6 = syz_open_dev$rtc(&(0x7f00000014c0), 0x1, 0x80)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000001500)={{0x1, 0x1, 0x18, <r7=>r6, {0x1}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000001540)={{0x1, 0x1, 0x18, r6}, './file0\x00'})
mount$9p_tcp(&(0x7f0000001580), &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x80000, &(0x7f0000001640)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@version_L}], [{@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x4c, 0x0, 0x4, 0x19, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
syncfs(0xffffffffffffffff)
ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000001800)={0x18, 0xc, 0x12, 0x9, 0x6, 0x8, 0x1, 0x60, 0x1})
sendmsg$nl_generic(r5, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x20, 0x3d, 0x200, 0x70bd25, 0x25dfdbfd, {0x1d}, [@nested={0xc, 0x54, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x40000c0)
r8 = fsmount(r5, 0x0, 0xf2)
mount$9p_fd(0x0, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980), 0x394062, &(0x7f0000001a00)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {}, 0x2c, {[{@version_9p2000}, {@access_any}, {@nodevmap}, {@loose}, {@access_client}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@dont_measure}, {@uid_gt={'uid>', r2}}, {@obj_role={'obj_role', 0x3d, 'port'}}, {@obj_user={'obj_user', 0x3d, '#'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x65, 0x37, 0x0, 0x64, 0x0, 0x32, 0x38], 0x2d, [0x39, 0x34, 0x30, 0x30], 0x2d, [0x35, 0x33, 0x37, 0x34], 0x2d, [0x0, 0x0, 0x30, 0x61], 0x2d, [0x37, 0x65, 0x64, 0x66, 0x38, 0x35, 0x31, 0x65]}}}]}})

00:02:58 executing program 7:
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000000))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000040)="c41fcff162ec791d326288e6d12bead43a6af5d37a9cada8c55aa287ef1f794e0b31a700c806bac4bcaee6fe9ba26a641312c40e0b86b05aa922031668d02e906ca60d2d27c8187830de6585ab8a961293632ca1b889377b5bfe46cabeccffcd05f19314b15c8efe837d5ed2470ebfdf33e21d3ca97c47481cb008c9ddf17443cfe9cb181bb59adfb0ff815bfba40102799251f871b2b0f874c315ea3ae3808388cfd093962b3d48aa38aa26f692e3b13bff58b9f9bfad0058e8e4f04131e70e7f755e02bcbb103810b2c1d972ad7c0a5f55c43a5f6551445d9863900940a48541f0d1b1607ea645febbdb1595de067ad86d", 0xf2}, 0x68)
openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x98000, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000300)=""/253, 0xfd}, {&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/101, 0x65}, {&(0x7f0000001500)=""/166, 0xa6}], 0x6, &(0x7f0000001640)=[@cred={{0x1c, 0x1, 0x2, {<r0=>0x0, <r1=>0x0}}}], 0x20}}, {{&(0x7f0000001680)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001700)=""/205, 0xcd}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001840)=""/163, 0xa3}, {&(0x7f0000001900)=""/24, 0x18}, {&(0x7f0000001940)=""/20, 0x14}, {&(0x7f0000001980)=""/217, 0xd9}, {&(0x7f0000001a80)=""/72, 0x48}, {&(0x7f0000001b00)=""/16, 0x10}, {&(0x7f0000001b40)=""/57, 0x39}], 0x7, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}, @rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r9=>0x0, <r10=>0x0, <r11=>0x0}}}, @rights={{0x18, 0x1, 0x1, [<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff]}}], 0x98}}], 0x3, 0x22, &(0x7f0000001d80)={0x0, 0x3938700})
r14 = syz_open_procfs(r9, &(0x7f0000001dc0)='net/igmp\x00')
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000001e00)={{0xa, 0x4e20, 0x9, @remote, 0x7}, {0xa, 0x4e21, 0x4cd6, @mcast2, 0x9}, 0x0, [0x52, 0x400, 0x7, 0x10001, 0x8, 0x10000, 0x5, 0x1]}, 0x5c)
ioctl$AUTOFS_DEV_IOCTL_READY(r14, 0xc0189376, &(0x7f0000001e80)={{0x1, 0x1, 0x18, <r15=>0xffffffffffffffff, {0x8000}}, './file0\x00'})
r16 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002340)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
r17 = accept4(r3, &(0x7f0000002380)=@qipcrtr, &(0x7f0000002400)=0x80, 0x0)
r18 = gettid()
sendmsg$unix(r15, &(0x7f0000002500)={&(0x7f0000001ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001f40)="b0f2b2511d3da3ec4c0a75f9ab4a3a94df269a6c6b37de7e13fae2c88e372daaef48f89f6b32feac08ea662262da7708a1b24ee3190a255085a06fa60e723e203fc1db43e715e240752a3cf7ee62a7fbe395576c5f51364ac32a55b6e70c1dee93206582c11ccf189c3ed3d55fe82aa5a9db5551c3089c1c5ac683ba45703ff79e5f6c48476776525c161869505c65d7d49b3b4fa7f8180ffd187c59b97c32b38486b3d002cba583d49b971f490d3ecf183f338d366b", 0xb6}, {&(0x7f0000002000)="7fb7d70098c2950b275676f2460263386cf4ab43936dca4f199300977f023491566ea12589daf9d239a7edd81a4bc98a93e6bb4f149aae4aa7a29956c08c6717072e2e23e5abfe7205d1f008c8ff93", 0x4f}, {&(0x7f0000002080)="a788d29d20e1ed3a5d89c7649a7f30bbb0f9030433538c27f2544f2820b0fb08623ded39e966008109512c0b705984f4c6782714d66df2f6ac7b7d9a2e902926b097e0239e9fe607daffc22a781f7ba5156552d967ede71961cb6035ec14640c0bbc4ba764a446127f8ae9c9d489", 0x6e}, {&(0x7f0000002100)="b168bbba651d803b870ad3bd71cc3980d214bf597b7f6cfead97111d0a43e33226c19f4259ad9508dd745c0634e0bb3772d2cbf7c7eb188dc43914a364e5dab0588ccaa007379fb44381994622d05931427c9974598e141c6554829f2d978ba91053604e40e213a41a0bdab04cd8fd27c5cc86b053fa19707cf31eb8d13d35e6ccf864c06aa7ffa87f1e85740c5aa4994f00679cd98df8d228ad346dbaaf3c6e01", 0xa1}, {&(0x7f00000021c0)="b45e075c8d764afa2aed73274e4a5af69325b4397441e847c39c6151e4d08346ac4f57bf3abda0119c", 0x29}, {&(0x7f0000002200)="7a06e669b0ea37a9c2d4a20319b0e328ba2097d49151382417a3af7782947550609fe6b98e87548499aadf49e7f62c9b42e9f697ad9de57db28895d1bff0bdc27b29705d6db4009a45ad5a585de07348f31134ff1b57c2531390d78647473ad194cebd82d8b119f45913be1f308a96a2438fc05e172c6ddaa99352b0e237ba39998331747b5c8862", 0x88}], 0x6, &(0x7f0000002440)=[@rights={{0x1c, 0x1, 0x1, [r16, r6, r14]}}, @rights={{0x24, 0x1, 0x1, [r12, r13, r17, r8, r4]}}, @cred={{0x1c, 0x1, 0x2, {r18, r1, r11}}}, @cred={{0x1c, 0x1, 0x2, {r2, r10, r11}}}], 0x88, 0x4a081}, 0x20004010)
ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000002540)={0x1a, 0x1, {0xa04, @usage=0xfffffffffffffffe, 0x0, 0x5ebe, 0x7, 0x8, 0x0, 0x10001, 0x22, @usage=0x4, 0x75, 0x9, [0x4, 0x9, 0x8, 0x80000001, 0x7ff, 0x100000000]}, {0x4df, @usage=0x800, 0x0, 0x5, 0x8, 0x4, 0x7fffffff, 0x10001, 0x0, @usage=0x8, 0x0, 0x0, [0x1ff, 0x1ff, 0x9, 0x5, 0x8000, 0x3]}, {0xff, @struct={0x3, 0xd86e}, 0x0, 0x4800, 0x9, 0x9, 0x200, 0x1f, 0x10, @usage=0x2, 0xfffffff8, 0x7, [0x2, 0xfffffffffffffffa, 0x71c2, 0x144, 0x1, 0xbf5]}, {0x6506, 0x1e, 0x6}})
ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000002940)={0x7, 0x6, 0x2, 0x400, 0x7fff})
openat(r13, &(0x7f0000002980)='./file0\x00', 0x20c902, 0x20)
ioctl$TIOCGRS485(r6, 0x542e, &(0x7f00000029c0))
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r12, 0x50009417, &(0x7f0000002a80)={{}, 0x0, 0x0, @inherit={0x68, &(0x7f0000002a00)={0x0, 0x4, 0x640, 0x92, {0x12, 0x9, 0x1, 0x3, 0x269}, [0x3, 0x2, 0x50c0000000000, 0xfb]}}, @subvolid=0x5c13})
syz_mount_image$vfat(&(0x7f0000003a80), &(0x7f0000003ac0)='./file0\x00', 0x3, 0x3, &(0x7f0000003d40)=[{&(0x7f0000003b00)="a7bbbbdab1ce949e6ea71902e8603aa6a857402a6732a3c780e5b965d17cf4d1a7a46c39ac0ed5e033c5a2f45ec9d1e6912112456e79ac68496e5ac51dd8221c615410401bcfaac2511c79499adb853eefe396f00310", 0x56, 0x9d8a}, {&(0x7f0000003b80)="301ebc461a783bab161dc31d2e57fc8f7a2c06938348e0c96c23c19da76fa2142e27b07131215aefb08c864cebeb010a0977d3c423c34c6c9ef7666283818da0f8d185ba9c7a5d29653f989c1afd2ce1049a827825ad3a4082e515468dbf8b8ed23c2c36613181bd3675d33efa5fc39843da3ffadcda23ddb783147f7deab9846223c04a5e5b549208f93c196f2a1f7c598529d01a2aae12bb0edbc714bf00184b959301d54c0209b426d2e2f2caa9ff71f9a44fa0c5fd", 0xb7, 0x7}, {&(0x7f0000003c40)="c5e17d191f11cf87a6b42714dbbffa724ddf6925621176371218693b0a11792e659e3f7d78a569679b520677e9f2c21a5f576e1790eb0bbe8bb69ceb0f470716b77ac0dc46b88b1ece5f67a18d4dcf2cce6b781b60e16461c1a071cca84f946b143c99a2f03852f8f46fff450c8b4e7f47dff8b1c8b3fcd980db49f5b45355f140971dbc221e57baa0093386f35697119afc8859c8cb33325172f5808092f9850a223d2e2bb874998a5e2f9b4fef95b302bfd99f44a1998d6fa567371de6d36313fcd47601", 0xc5, 0x10000}], 0x4000, &(0x7f0000003dc0)={[{@uni_xlate}, {@utf8}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@measure}]})
write$tcp_mem(r15, &(0x7f0000003e40)={0xfffffffffffffffb, 0x20, 0x1, 0x20, 0x2}, 0x48)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000041c0)=<r19=>0x0)
sendmsg$netlink(r7, &(0x7f00000056c0)={&(0x7f0000003ec0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc, &(0x7f0000005680)=[{&(0x7f0000003f00)={0x5c, 0x19, 0x200, 0x70bd29, 0x25dfdbfc, "", [@generic="5a237619c21a1248c95e80a92d33d09ed46f81adbf0fbbeb44795b529eb318cc720a41a0d372d7b1c86eb744958643662a71207afc364e", @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x5c}, {&(0x7f0000003f80)={0x238, 0x3e, 0x200, 0x70bd2c, 0x25dfdbff, "", [@generic, @typed={0x8, 0x32, 0x0, 0x0, @pid=r0}, @generic="5f37c831e7891176c2f37c1f31ed8308d2d46e1c74a73b242e834987749abb43f03d0b7a809e1f1bf081bd91d9111e94be4b948d9afd695100366d3740ee90a45a39a8f58a2ac2086275f96a29d559ed77b41993b2afb313061ea386d3dece8f2a128cbe867210fe8951b4fccfee548ed79320c39b841105cbf5f1f8eed84216cabd458fb72f1cdd661bfb5d6f1a194ded1f183414b7986a237e15a1161bb37a35478f3d28dafd14010206c5c8f48c6c7d8f7f3d983ac23ea5c95dfec24d77a3a086193cb3c78479d1800d49d9b4b725ff0dc24fb38024d757e975c78964d997a5900ea10173c54a5198c5d0ff2f33bf9ea74141e57a", @generic="060f50343907321afd32ae273f7c14a7f5c3623c8e7c8876a617c1e2b03d0e5043cec515e640d8f9126b8bd897c693decf8c7d0e67f152558b3993d3486a534e41f4b312", @nested={0xe1, 0x3d, 0x0, 0x1, [@generic="ea8b949cd38fde26585df88195cfcb5b96d21b60a146bc2c508ab1ee0ab31aeaf0f09cd7e0944d7ef9abc2a62405e83492b5eb2d7e49af734160939ab4c7d70d317f50c9420673f030ed0b431c5e6110199acefd7762320acd3df889ed4be49330f2cedff0285b0c8391aa4203c809fa36f5d8b901e7a20010e7a5db7e83db091de2a95a7ac45835d0e3a7b556bbe19c6c7aca568034d72e3ec128d5987ddfa581841d46655dd45b45659fca8d46ed219df04cde9d723a755f721a19f3ade8dd49d98d53b65fab28ad1634818d38a961cfea588e279e722af3574207fa"]}]}, 0x238}, {&(0x7f0000004240)={0x13c8, 0x28, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x2b5, 0x7c, 0x0, 0x1, [@generic="147d75b5314c82168d0c853d5d208edf0ba6468e4f12f24d4d244f8e00bea6259646d8486e397711729cd73ebc042542454421d8b54f46c53f9ddd6ebfd5ee2e971d18d8439eb790b8d3aace2ad8e3966dde67c4851204f7d3d04fa9bee7d0aa38a05feab2d379a2bebfb8851f104f31b414c6924beaf2a7a756757a9330aa415f8f88a7ff0edb9832bddb22f316725fe5729948b868d83a709a81c44e57f53d8c31e702239626336118d709a3d4a2c8a58a5aee23a3b615d329deb705", @typed={0x8, 0x16, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x39, 0x0, 0x0, @pid=r19}, @generic="7b7d380c5ee21b28bf172d5e96be79726a613bceff786fb4d27ddebe73e3228c3fdd75fd90921dabf5aebea40a94fce374e2708f48b496d11ed807338efd49a16c497ebc5cd9b618fab7867964ee2dc9f698f98baf97701aa903581fe3b4f7362da6a9f54dfa0263d83a8a2096f9022c235a7865393afe96a173a63e8ffd9f336fd6db5e538b4fdb4eab5a360c3eb231e1b673379d485848371770f057c9b7da27cb5e09379db92650d8", @typed={0x8, 0x7f, 0x0, 0x0, @uid=r10}, @generic="8970c418f5f276175cbd255b9a4d16a690ae8590e4fb5db7fc7629ef9eabba2d362fc0097150015213f863d32f567ca9a32aaf1ef4ac33b4661a0c0233618a407466c40725a288a8c65c8d818149450a7efa7f7f0c759eb49f990c1deb8d8354e9b7ddc1494126343d6a9c9039c0c16bada6f261070384d65d17358753267cdc1fd8e48112b24230aca9a86924d804e21686ecd2fe45291a84532f184c1f4a716cb75e5a9cc42e6e092871c22684ebba276a032c4fe6eec896a6d35723ba03651fabc88a1088eec1cb8e1efd5eda946c21369cf989525f1ef60d4afbb75624fbb758", @typed={0xf, 0x35, 0x0, 0x0, @str='.\\]\xe1}-@.\\!\x00'}, @typed={0x38, 0xd, 0x0, 0x0, @binary="d71542456bea7fcbba5741d17bd6a3040d72f0bd1f49ed1abdbfd6bf174ce8340fee1b57eaa2b6621c3c726786cde7a34ee7de5a"}, @typed={0x8, 0x1f, 0x0, 0x0, @u32=0x10001}]}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x1ff}, @typed={0x8, 0x70, 0x0, 0x0, @fd}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@private0}, @nested={0x78, 0x7e, 0x0, 0x1, [@generic="fd0203fae84bb988ae22fea493d22ba2b7cc062b93aed4429aa8e88f224fc8d8c069a85850c9faedb4f440d9d882e53a14f15050afab4fc88fa7abe81c3ac3c6fcb632724bb0772473b992", @generic="eb4ba1fb3e6cfa00a824a1a9388ebdc91e8b80d20cae4f6c0e3836c597c9ca4115c77326225e", @generic="b08908"]}, @typed={0xc, 0x89, 0x0, 0x0, @u64=0x2573}, @generic="3175a99eef55eeec1d8347f236e1a13a0b288736745fda146332a7e6f9017e6dcaa2991a69cd9e807a87e8076defbdb7c87707cadfb6d56b73a4bfc614e5a2d4364b34", @generic="8171ee9be1c123bccfc73c926ac0ad9e0b4cfee227", @generic="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"]}, 0x13c8}, {&(0x7f0000005640)={0x20, 0x2c, 0x20, 0x70bd28, 0x25dfdbfb, "", [@nested={0x4, 0x2a}, @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x800000}]}, 0x20}], 0x4, 0x0, 0x0, 0x4040040}, 0x20004810)

00:02:58 executing program 4:
r0 = syz_io_uring_setup(0x1e87, &(0x7f0000000000)={0x0, 0x51f2, 0x10, 0x3, 0x29b}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r1=>0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x20)
syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1, 0x0, r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, &(0x7f0000000240)='./file0\x00', 0x4, 0x400}, 0x9)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000e70000/0x4000)=nil, 0x4000, 0x0, 0x80010, r0, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000c16000/0x4000)=nil, 0x4000, 0x3000006, 0x10, r2, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f00000027c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r2, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000002600)=[{&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000380)=""/5, 0x5}, {&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/147, 0x93}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/255, 0xff}], 0x8, &(0x7f0000002680)=""/235, 0xeb}, 0x0, 0x2000, 0x0, {0x2}}, 0x1)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000002800))
r6 = syz_io_uring_setup(0x4bd4, &(0x7f0000002840)={0x0, 0x932f, 0x4, 0x1, 0x2cc, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f4a000/0x1000)=nil, &(0x7f00000028c0)=<r7=>0x0, &(0x7f0000002900))
pipe(&(0x7f0000002940)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_setup(0x479e, &(0x7f0000002980)={0x0, 0xa54b, 0x2, 0x2, 0xdd, 0x0, r8}, &(0x7f0000f79000/0x4000)=nil, &(0x7f0000ccc000/0x1000)=nil, &(0x7f0000002a00)=<r10=>0x0, &(0x7f0000002a40)=<r11=>0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r1, &(0x7f0000002b40)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r9, &(0x7f0000002a80)=0x80, &(0x7f0000002ac0)=@isdn, 0x0, 0x80000, 0x0, {0x0, r12}}, 0x9)
r13 = syz_mount_image$vfat(&(0x7f0000002b80), &(0x7f0000002bc0)='./file0/file0\x00', 0x7fffffff, 0x1, &(0x7f0000002d00)=[{&(0x7f0000002c00)="f89ed34f52f834af56c63e2a8f3c2280a0cb3ae36be1d06045283440796df1d8de494919d53aa8778e28daf5ae27d98b205ae303182e837a942aa6c37e7aa1c6ddc8eb21ebbd1c1f89f5b6566ff6d5dfb1cfc153476a33c3d2c09cd13ea380de07d09c23fe384dda5606310fd134df882bcca0ca507425873a3157e741a85e6678738f18be67c7d6410263a2117326f8bf918f1313253d401b6b9cb979458f3c19de3c1a57895bd0b59e7047a153651d9a6dd196a578c1a8d84ef29713d145c6c59f71625395f5482292dc36253b812de61d42bd34fc835df4fb9ecfba5bef6b0123", 0xe2, 0xf85}], 0x2900810, &(0x7f0000002d40)={[{@shortname_win95}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@uid}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_win95}, {@utf8no}, {@shortname_win95}, {@utf8no}], [{@obj_user}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'%'}}, {@fowner_gt={'fowner>', r3}}]})
r14 = epoll_create(0x0)
tee(0xffffffffffffffff, r14, 0x8, 0x0)
r15 = mmap$IORING_OFF_SQES(&(0x7f0000cf8000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r9, 0x10000000)
r16 = openat$random(0xffffffffffffff9c, &(0x7f0000002e40), 0x2000, 0x0)
syz_io_uring_submit(r10, r15, &(0x7f0000002e80)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r16, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0x0)
close_range(r16, r13, 0x0)
syz_io_uring_submit(r7, r11, &(0x7f0000003000)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f0000002ec0), &(0x7f0000002fc0)='./file0\x00', 0x0, 0x4000, 0x1, {0x0, r12}}, 0xfffffffd)

[   68.130449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.132601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.133705] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.134909] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.138572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.139576] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.140494] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.143094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.144283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.146176] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.177382] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   68.179426] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   68.182026] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   68.183546] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.185660] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.186879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.188591] Bluetooth: hci0: HCI_REQ-0x0c1a
[   68.189111] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   68.191691] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   68.205141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.206443] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.210908] Bluetooth: hci1: HCI_REQ-0x0c1a
[   68.215068] Bluetooth: hci2: HCI_REQ-0x0c1a
[   68.239983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   68.241523] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   68.244108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   68.246319] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   68.252863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   68.254042] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   68.255583] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   68.257485] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   68.258550] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   68.263913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   68.264840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   68.265854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   68.266779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   68.268006] Bluetooth: hci3: HCI_REQ-0x0c1a
[   68.268954] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   68.270023] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   68.270908] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   68.290007] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   68.296621] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   68.308894] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   68.315104] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   68.316367] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   68.320479] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   68.322219] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   68.323545] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   68.324694] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   68.326303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   68.331649] Bluetooth: hci6: HCI_REQ-0x0c1a
[   68.349387] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   68.349446] Bluetooth: hci5: HCI_REQ-0x0c1a
[   68.353039] Bluetooth: hci7: HCI_REQ-0x0c1a
[   68.373519] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   68.392810] Bluetooth: hci4: HCI_REQ-0x0c1a
[   70.257635] Bluetooth: hci1: command 0x0409 tx timeout
[   70.258622] Bluetooth: hci2: command 0x0409 tx timeout
[   70.259492] Bluetooth: hci0: command 0x0409 tx timeout
[   70.385494] Bluetooth: hci5: command 0x0409 tx timeout
[   70.386309] Bluetooth: hci7: command 0x0409 tx timeout
[   70.386992] Bluetooth: hci6: command 0x0409 tx timeout
[   70.449495] Bluetooth: hci4: command 0x0409 tx timeout
[   70.450203] Bluetooth: hci3: command 0x0409 tx timeout
[   72.305354] Bluetooth: hci0: command 0x041b tx timeout
[   72.305783] Bluetooth: hci2: command 0x041b tx timeout
[   72.306145] Bluetooth: hci1: command 0x041b tx timeout
[   72.433365] Bluetooth: hci6: command 0x041b tx timeout
[   72.433783] Bluetooth: hci7: command 0x041b tx timeout
[   72.434147] Bluetooth: hci5: command 0x041b tx timeout
[   72.497355] Bluetooth: hci3: command 0x041b tx timeout
[   72.497751] Bluetooth: hci4: command 0x041b tx timeout
[   74.354312] Bluetooth: hci1: command 0x040f tx timeout
[   74.354748] Bluetooth: hci2: command 0x040f tx timeout
[   74.355119] Bluetooth: hci0: command 0x040f tx timeout
[   74.482314] Bluetooth: hci5: command 0x040f tx timeout
[   74.482740] Bluetooth: hci7: command 0x040f tx timeout
[   74.483094] Bluetooth: hci6: command 0x040f tx timeout
[   74.546328] Bluetooth: hci4: command 0x040f tx timeout
[   74.546729] Bluetooth: hci3: command 0x040f tx timeout
[   76.401486] Bluetooth: hci0: command 0x0419 tx timeout
[   76.401891] Bluetooth: hci2: command 0x0419 tx timeout
[   76.402231] Bluetooth: hci1: command 0x0419 tx timeout
[   76.530312] Bluetooth: hci6: command 0x0419 tx timeout
[   76.530717] Bluetooth: hci7: command 0x0419 tx timeout
[   76.531074] Bluetooth: hci5: command 0x0419 tx timeout
[   76.594359] Bluetooth: hci3: command 0x0419 tx timeout
[   76.594775] Bluetooth: hci4: command 0x0419 tx timeout
[  121.762437] loop0: detected capacity change from 0 to 264192
[  121.800201] loop0: detected capacity change from 0 to 264192
[  123.330151] loop3: detected capacity change from 0 to 2
[  123.332766] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  123.366989] loop3: detected capacity change from 0 to 2
[  123.367858] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  123.585186] loop7: detected capacity change from 0 to 256
[  123.588488] loop4: detected capacity change from 0 to 264192
[  123.597849] audit: type=1400 audit(1665101035.701:7): avc:  denied  { map } for  pid=3962 comm="syz-executor.4" path="pipe:[13804]" dev="pipefs" ino=13804 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1
[  123.601709] FAT-fs (loop7): Unrecognized mount option "subj_role=" or missing value
[  123.621795] loop7: detected capacity change from 0 to 256
[  123.623200] FAT-fs (loop7): Unrecognized mount option "subj_role=" or missing value
00:04:12 executing program 2:
getresuid(0x0, 0x0, 0x0)
lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x9, 0x3, &(0x7f0000000540)=[{&(0x7f00000002c0)="00d9b1990017b8b525a2f6459e8afd08f100eb2a8d01c63a7191e49a16a4135e71f2585d135ab2ac630b3c5fb4ada3d6a727d79fbccb4de4def07f6d689bf7b10bee4b855772f6826da321626e2e4f652bef850fe9fdfc2942db25372381e97632813309dd65ccfdf79c610671820fd14344a3649a1449724557f6e65c24bef1580fda1466a6129060218b0854b19e4c7876c2784696469954bb904daf8db618a0c952dd3e80665df1998be14efea529f565dba143f6af2a6fb76ac9107bfbdff8d342daf1a83ba0cfa78fb8f5bc", 0xce, 0x3ff}, {&(0x7f00000003c0)="12704339b6985cffc49fef9f9eba1f0efcd123482c53009799e245ec3e186e2c69fdd99853c783565ede625f408fa4edb1f6dd63def78747b0d75086e16ab87341affe0a23e3b509028c1d2059cc5e1ad69fb470e48c0d89ee", 0x59, 0x8}, {&(0x7f0000000440)="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", 0xfd, 0x380}], 0x2b4c020, &(0x7f0000000680)={[], [{@fowner_eq={'fowner', 0x3d, r0}}, {@appraise_type}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]})
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000002140), 0x80, &(0x7f0000002280)={[{@nolazytime}, {@errors_remount}], [{@uid_gt}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]})
msgctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6}}, &(0x7f0000000180)=0xe8)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x72)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r3=>0x0}, &(0x7f0000000140)=0xc)
syz_open_procfs(r3, &(0x7f00000001c0)='net/if_inet6\x00')
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xff, 0x0, 0x4e, 0x4, 0x0, 0x1, 0x40020, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x40, 0x5, 0x3, 0x0, 0x849, 0x5, 0x8001, 0x0, 0x9, 0x0, 0xd7}, r3, 0x9, r2, 0x3)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r1, 0x0, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7465, 0xfff, 0x7, 0x6, 0xfff, r3, 0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff)

[  140.419222] loop2: detected capacity change from 0 to 3
00:04:12 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x7, 0x0, 0x0, 0x0)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)=0x3)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x4, 0x5, 0x88, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4a1, 0x2, @perf_config_ext={0x9, 0xe2a}, 0x0, 0x0, 0x2, 0x5, 0x1ff, 0x5, 0x0, 0x0, 0x1, 0x0, 0x400}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r2 = fcntl$getown(r0, 0x9)
tkill(r2, 0x27)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xff, 0x0, 0x4e, 0x4, 0x0, 0x1, 0x40020, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x40, 0x5, 0x3, 0x0, 0x849, 0x5, 0x8001, 0x0, 0x9, 0x0, 0xd7}, 0x0, 0x9, 0xffffffffffffffff, 0x3)
ptrace(0x4207, 0x0)
tkill(0x0, 0x16)
r3 = openat$cgroup(r0, &(0x7f0000000c40)='syz1\x00', 0x200002, 0x0)
fallocate(r3, 0x4, 0x4, 0x7fff)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x1})
ptrace(0xffffffffffffffff, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x100034)
mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="5472616e733dff63702c706f72743d3078303030303030303030303030346532342c616669643d3078303030303030303030303030303030302c616669643d3078303030303030303043303030303030342c616363657343e8d7c82f2bf59be90bf5137c53733d757365722c6f626a5f747970653d2f70726f632f6c6f636b73002c726f6f7463050a0000000000f508cf725f752c6f626a5f747970653d2c726f6f74636f6e746578743d8b5faee252d371723bf9c43a484a7e8af5fc1ac1b1776da62a9155cbdae027a2676ac0e3756208249cccddc658ea21a90ee1e5627386a848858d57c070ec74bc79db2ac78a00ffffecf65ffab43aafc8e683d9b233ecf3e6d0e2bb261da3d9447f88ee75eb8a47c993c306d410e876fbcd4c99e736ceef486d6611677a3a1f21824c6f8d85d1d9f1b9f74c2386bf3a812f29f3fba337c7abb289edaa42c9bad855627f0e8c5d0ada6e4e7f0000000000000000000000000000000044fa77ee041dbabca34779121efce93c5daec811252bdbfc8b64ad67597968e12829f2fbf65f19c9f88f87b14dbed8ada2071f6e535508a0598351c0b1d291b500b3bd50121f0564fe2354fa1a51cfd2c48df01bab9b01fb46a67b5366baa80115"])

00:04:12 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="bc0774f1680e0f30fa2f5abbed2a463897bc1b16b746e00eeb589f436a37c8582a462ae92da14ebcf5ac6f2e889ca4923471a581a49463e28b0cd3052b972da754df40c689ce9a7b8bb9534eca4b0a61fee3fe8932d1106e110ec94797d41c4b64f298b42bac50b60c9f5d55d746b33bc92fc03463aea1c51d7cc624f094961557ce0ccaaa2aaf385465a9b04bcfe840110ed0e62624c2ce2a36e216d6ac8907db73f1bcebd90b084d1506d6b1d6125339af8831c82d5a58d882d925a84e1c6fd7ed33a869aab81e2abdbe667b639ea1e39eb61e0cd75ed81af68e3586f5d974d6d40e5422", 0xe5}, {&(0x7f0000000300)="10570415256e75228dd7c0bccb7bd13b03a4aac64608ad6090133982a236284e013c4ad894fd2f1c34c69cafdf3a3b5ef4414bd866a9f82a07ac1b7a17c5bae623b20313144a1e47d76c55d6ac2a942533ed511b91347f0cbff5d5d28473707f5cc1756b2343a7018f9fa22b95d31988c2be2e1f07e117aa7a8ce1bbd9ca97bb03513a4d2452f29e892586b6ca93aa0056d4ae75774d3351ae42c5a2dbc44827545279c7fa08c8ec5d64b5c82ef657fba8", 0xb1}, {&(0x7f00000003c0)="ad7c37f35965fe2616e9774d94ed837508c338e7429a249b22cdbca206d69e0214de5d57558e1f6b1a2577fa45474871949e88c27fe370b92e6905aabd94e80e4a5b9d87525d71ec23372ad98aa77a1430a02fe38296a9cf86847897980a3b47997cbdc0fe014fd36259fb56d2848b", 0x6f}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d351b4a240e9ddada4f4f477383c941632b7648c81a278616c28319bceb94770b6c39062ab4df918cae1be3dea2590f664434dd339baf9623439710e605550f6dbe", 0xed}], 0x4, r1)
r2 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2d5})
r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "67f28f824b25d08c02eddd4d3931ff2016215f14c2fd4e4a079c98befb6485e815948411dcc1c0a111043f9ab3cd82b71275b2aad4f99fce01a0951b7bf59006"}, 0x48, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='trusted\x00', 0x0)
add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r3)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe)
syz_io_uring_setup(0x22d2, &(0x7f0000000580)={0x0, 0x2799, 0x0, 0x3, 0x13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x426000, 0x110)

00:04:12 executing program 3:
ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x401, 0x1400}, {0x0, 0xffff}], 0x2, 0x0)
unshare(0x48040080)

00:04:12 executing program 0:
getresuid(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000002140), 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB='nolqzytemount-ro,uid>\x00'/33, @ANYRESDEC=0x0, @ANYBLOB="2c726f87090000000000000044a21e23da665f753c00a51b6583c708e41dc6e779b29e83595c73b4b597c931d8841e6a8654e6b5ece945615290273ee1192ce8182dcb40cf93a10cb14c8d29ced6720d85ca27af356615707f64acc8bfd43de5fd2e9b9f1770ae6387d78238ec04b5ad48b39e6b862bc08a4136ed665fbeb7bfc50413c99d0768e936629372ea1718e0513f7d8bd786d92ce029f548824a371b38d2a3c9"])
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
setresuid(0xffffffffffffffff, 0x0, r0)
setresuid(0x0, r0, r0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
r3 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x18, 0xfffffffffffffffa)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8)
keyctl$chown(0x4, r3, r4, r2)
setresuid(0x0, r1, 0x0)
setresuid(r0, r1, r0)
msgctl$IPC_RMID(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff)
syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000380)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
r7 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380))
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x6)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4000, @fd_index=0x2, 0x0, 0x5, 0x7772882d, 0x0, 0x1, {0x1, r8}}, 0x6)

00:04:12 executing program 4:
r0 = syz_io_uring_setup(0x1e87, &(0x7f0000000000)={0x0, 0x51f2, 0x10, 0x3, 0x29b}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r1=>0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x20)
syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1, 0x0, r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, &(0x7f0000000240)='./file0\x00', 0x4, 0x400}, 0x9)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000e70000/0x4000)=nil, 0x4000, 0x0, 0x80010, r0, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000c16000/0x4000)=nil, 0x4000, 0x3000006, 0x10, r2, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f00000027c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r2, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000002600)=[{&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000380)=""/5, 0x5}, {&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/147, 0x93}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/255, 0xff}], 0x8, &(0x7f0000002680)=""/235, 0xeb}, 0x0, 0x2000, 0x0, {0x2}}, 0x1)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000002800))
r6 = syz_io_uring_setup(0x4bd4, &(0x7f0000002840)={0x0, 0x932f, 0x4, 0x1, 0x2cc, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f4a000/0x1000)=nil, &(0x7f00000028c0)=<r7=>0x0, &(0x7f0000002900))
pipe(&(0x7f0000002940)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_setup(0x479e, &(0x7f0000002980)={0x0, 0xa54b, 0x2, 0x2, 0xdd, 0x0, r8}, &(0x7f0000f79000/0x4000)=nil, &(0x7f0000ccc000/0x1000)=nil, &(0x7f0000002a00)=<r10=>0x0, &(0x7f0000002a40)=<r11=>0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r1, &(0x7f0000002b40)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r9, &(0x7f0000002a80)=0x80, &(0x7f0000002ac0)=@isdn, 0x0, 0x80000, 0x0, {0x0, r12}}, 0x9)
r13 = syz_mount_image$vfat(&(0x7f0000002b80), &(0x7f0000002bc0)='./file0/file0\x00', 0x7fffffff, 0x1, &(0x7f0000002d00)=[{&(0x7f0000002c00)="f89ed34f52f834af56c63e2a8f3c2280a0cb3ae36be1d06045283440796df1d8de494919d53aa8778e28daf5ae27d98b205ae303182e837a942aa6c37e7aa1c6ddc8eb21ebbd1c1f89f5b6566ff6d5dfb1cfc153476a33c3d2c09cd13ea380de07d09c23fe384dda5606310fd134df882bcca0ca507425873a3157e741a85e6678738f18be67c7d6410263a2117326f8bf918f1313253d401b6b9cb979458f3c19de3c1a57895bd0b59e7047a153651d9a6dd196a578c1a8d84ef29713d145c6c59f71625395f5482292dc36253b812de61d42bd34fc835df4fb9ecfba5bef6b0123", 0xe2, 0xf85}], 0x2900810, &(0x7f0000002d40)={[{@shortname_win95}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@uid}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_win95}, {@utf8no}, {@shortname_win95}, {@utf8no}], [{@obj_user}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'%'}}, {@fowner_gt={'fowner>', r3}}]})
r14 = epoll_create(0x0)
tee(0xffffffffffffffff, r14, 0x8, 0x0)
r15 = mmap$IORING_OFF_SQES(&(0x7f0000cf8000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r9, 0x10000000)
r16 = openat$random(0xffffffffffffff9c, &(0x7f0000002e40), 0x2000, 0x0)
syz_io_uring_submit(r10, r15, &(0x7f0000002e80)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r16, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0x0)
close_range(r16, r13, 0x0)
syz_io_uring_submit(r7, r11, &(0x7f0000003000)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f0000002ec0), &(0x7f0000002fc0)='./file0\x00', 0x0, 0x4000, 0x1, {0x0, r12}}, 0xfffffffd)

00:04:12 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x8000)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0xc0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1a}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc2)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20048081)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan4\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008080)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x6000040}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x90111030}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r1, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x81}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x800)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r6)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x1c}}, 0x881)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r6)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r10, 0xc25ed4c62255590c, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfc000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x40044)

00:04:12 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x2}, {0x6}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x61c2, &(0x7f0000000080)={0x0, 0x6cd8, 0x0, 0x1, 0x35b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x0, 0x4000}}, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x500, 0x0, 0x8})

[  140.449342] audit: type=1400 audit(1665101052.549:8): avc:  denied  { open } for  pid=3988 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  140.450728] audit: type=1400 audit(1665101052.550:9): avc:  denied  { kernel } for  pid=3988 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  140.458445] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  140.468294] ------------[ cut here ]------------
[  140.468316] 
[  140.468318] ======================================================
[  140.468322] WARNING: possible circular locking dependency detected
[  140.468326] 6.0.0-next-20221006 #1 Not tainted
[  140.468332] ------------------------------------------------------
[  140.468336] syz-executor.5/3990 is trying to acquire lock:
[  140.468342] ffffffff853fac98 ((console_sem).lock){....}-{2:2}, at: down_trylock+0xe/0x70
[  140.468384] 
[  140.468384] but task is already holding lock:
[  140.468386] ffff88803fdf5420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  140.468414] 
[  140.468414] which lock already depends on the new lock.
[  140.468414] 
[  140.468417] 
[  140.468417] the existing dependency chain (in reverse order) is:
[  140.468420] 
[  140.468420] -> #3 (&ctx->lock){....}-{2:2}:
[  140.468434]        _raw_spin_lock+0x2a/0x40
[  140.468446]        __perf_event_task_sched_out+0x53b/0x18d0
[  140.468457]        __schedule+0xedd/0x2470
[  140.468473]        schedule+0xda/0x1b0
[  140.468488]        exit_to_user_mode_prepare+0x114/0x1a0
[  140.468500]        syscall_exit_to_user_mode+0x19/0x40
[  140.468514]        do_syscall_64+0x48/0x90
[  140.468524]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  140.468538] 
[  140.468538] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  140.468552]        _raw_spin_lock_nested+0x30/0x40
[  140.468564]        raw_spin_rq_lock_nested+0x1e/0x30
[  140.468578]        task_fork_fair+0x63/0x4d0
[  140.468594]        sched_cgroup_fork+0x3d0/0x540
[  140.468609]        copy_process+0x4183/0x6e20
[  140.468620]        kernel_clone+0xe7/0x890
[  140.468629]        user_mode_thread+0xad/0xf0
[  140.468639]        rest_init+0x24/0x250
[  140.468652]        arch_call_rest_init+0xf/0x14
[  140.468664]        start_kernel+0x4c6/0x4eb
[  140.468674]        secondary_startup_64_no_verify+0xe0/0xeb
[  140.468688] 
[  140.468688] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  140.468702]        _raw_spin_lock_irqsave+0x39/0x60
[  140.468714]        try_to_wake_up+0xab/0x1930
[  140.468727]        up+0x75/0xb0
[  140.468742]        __up_console_sem+0x6e/0x80
[  140.468758]        console_unlock+0x46a/0x590
[  140.468774]        do_con_write+0xc05/0x1d50
[  140.468786]        con_write+0x21/0x40
[  140.468796]        n_tty_write+0x4d4/0xfe0
[  140.468809]        file_tty_write.constprop.0+0x455/0x8a0
[  140.468821]        vfs_write+0x9c3/0xd90
[  140.468840]        ksys_write+0x127/0x250
[  140.468858]        do_syscall_64+0x3b/0x90
[  140.468869]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  140.468883] 
[  140.468883] -> #0 ((console_sem).lock){....}-{2:2}:
[  140.468897]        __lock_acquire+0x2a02/0x5e70
[  140.468914]        lock_acquire+0x1a2/0x530
[  140.468930]        _raw_spin_lock_irqsave+0x39/0x60
[  140.468942]        down_trylock+0xe/0x70
[  140.468958]        __down_trylock_console_sem+0x3b/0xd0
[  140.468974]        vprintk_emit+0x16b/0x560
[  140.468989]        vprintk+0x84/0xa0
[  140.469005]        _printk+0xba/0xf1
[  140.469018]        report_bug.cold+0x72/0xab
[  140.469027]        handle_bug+0x3c/0x70
[  140.469037]        exc_invalid_op+0x14/0x50
[  140.469047]        asm_exc_invalid_op+0x16/0x20
[  140.469060]        group_sched_out.part.0+0x2c7/0x460
[  140.469078]        ctx_sched_out+0x8f1/0xc10
[  140.469094]        __perf_event_task_sched_out+0x6d0/0x18d0
[  140.469105]        __schedule+0xedd/0x2470
[  140.469120]        schedule+0xda/0x1b0
[  140.469135]        exit_to_user_mode_prepare+0x114/0x1a0
[  140.469145]        syscall_exit_to_user_mode+0x19/0x40
[  140.469159]        do_syscall_64+0x48/0x90
[  140.469169]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  140.469183] 
[  140.469183] other info that might help us debug this:
[  140.469183] 
[  140.469185] Chain exists of:
[  140.469185]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  140.469185] 
[  140.469200]  Possible unsafe locking scenario:
[  140.469200] 
[  140.469203]        CPU0                    CPU1
[  140.469205]        ----                    ----
[  140.469207]   lock(&ctx->lock);
[  140.469213]                                lock(&rq->__lock);
[  140.469219]                                lock(&ctx->lock);
[  140.469225]   lock((console_sem).lock);
[  140.469231] 
[  140.469231]  *** DEADLOCK ***
[  140.469231] 
[  140.469233] 2 locks held by syz-executor.5/3990:
[  140.469240]  #0: ffff88806cf37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  140.469270]  #1: ffff88803fdf5420 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  140.469296] 
[  140.469296] stack backtrace:
[  140.469299] CPU: 1 PID: 3990 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1
[  140.469311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  140.469318] Call Trace:
[  140.469321]  <TASK>
[  140.469325]  dump_stack_lvl+0x8b/0xb3
[  140.469337]  check_noncircular+0x263/0x2e0
[  140.469353]  ? format_decode+0x26c/0xb50
[  140.469370]  ? print_circular_bug+0x450/0x450
[  140.469388]  ? simple_strtoul+0x30/0x30
[  140.469404]  ? format_decode+0x26c/0xb50
[  140.469423]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  140.469440]  __lock_acquire+0x2a02/0x5e70
[  140.469462]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  140.469484]  lock_acquire+0x1a2/0x530
[  140.469500]  ? down_trylock+0xe/0x70
[  140.469518]  ? lock_release+0x750/0x750
[  140.469539]  ? vprintk+0x84/0xa0
[  140.469556]  _raw_spin_lock_irqsave+0x39/0x60
[  140.469569]  ? down_trylock+0xe/0x70
[  140.469586]  down_trylock+0xe/0x70
[  140.469603]  ? vprintk+0x84/0xa0
[  140.469620]  __down_trylock_console_sem+0x3b/0xd0
[  140.469637]  vprintk_emit+0x16b/0x560
[  140.469656]  vprintk+0x84/0xa0
[  140.469673]  _printk+0xba/0xf1
[  140.469685]  ? record_print_text.cold+0x16/0x16
[  140.469702]  ? report_bug.cold+0x66/0xab
[  140.469713]  ? group_sched_out.part.0+0x2c7/0x460
[  140.469731]  report_bug.cold+0x72/0xab
[  140.469744]  handle_bug+0x3c/0x70
[  140.469754]  exc_invalid_op+0x14/0x50
[  140.469765]  asm_exc_invalid_op+0x16/0x20
[  140.469779] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  140.469800] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  140.469811] RSP: 0018:ffff888040b57c48 EFLAGS: 00010006
[  140.469820] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  140.469828] RDX: ffff8880211e8000 RSI: ffffffff815677b7 RDI: 0000000000000005
[  140.469835] RBP: ffff888040b60000 R08: 0000000000000005 R09: 0000000000000001
[  140.469843] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88803fdf5400
[  140.469850] R13: ffff88806cf3d2c0 R14: ffffffff8547d200 R15: 0000000000000002
[  140.469861]  ? group_sched_out.part.0+0x2c7/0x460
[  140.469881]  ? group_sched_out.part.0+0x2c7/0x460
[  140.469901]  ctx_sched_out+0x8f1/0xc10
[  140.469920]  __perf_event_task_sched_out+0x6d0/0x18d0
[  140.469934]  ? lock_is_held_type+0xd7/0x130
[  140.469949]  ? __perf_cgroup_move+0x160/0x160
[  140.469960]  ? set_next_entity+0x304/0x550
[  140.469977]  ? update_curr+0x267/0x740
[  140.469996]  ? lock_is_held_type+0xd7/0x130
[  140.470011]  __schedule+0xedd/0x2470
[  140.470029]  ? io_schedule_timeout+0x150/0x150
[  140.470047]  ? rcu_read_lock_sched_held+0x3e/0x80
[  140.470067]  schedule+0xda/0x1b0
[  140.470084]  exit_to_user_mode_prepare+0x114/0x1a0
[  140.470096]  syscall_exit_to_user_mode+0x19/0x40
[  140.470111]  do_syscall_64+0x48/0x90
[  140.470122]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  140.470136] RIP: 0033:0x7fd54e8d8b19
[  140.470145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  140.470155] RSP: 002b:00007fd54be4e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  140.470166] RAX: 0000000000000001 RBX: 00007fd54e9ebf68 RCX: 00007fd54e8d8b19
[  140.470174] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd54e9ebf6c
[  140.470181] RBP: 00007fd54e9ebf60 R08: 000000000000000e R09: 0000000000000000
[  140.470188] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd54e9ebf6c
[  140.470195] R13: 00007ffc50b0f95f R14: 00007fd54be4e300 R15: 0000000000022000
[  140.470208]  </TASK>
[  140.523226] WARNING: CPU: 1 PID: 3990 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  140.523825] Modules linked in:
[  140.524035] CPU: 1 PID: 3990 Comm: syz-executor.5 Not tainted 6.0.0-next-20221006 #1
[  140.524535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  140.525074] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  140.525434] Code: 5e 41 5f e9 5b a5 ef ff e8 56 a5 ef ff 65 8b 1d 1b fe ab 7e 31 ff 89 de e8 f6 a1 ef ff 85 db 0f 84 8a 00 00 00 e8 39 a5 ef ff <0f> 0b e9 a5 fe ff ff e8 2d a5 ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  140.526588] RSP: 0018:ffff888040b57c48 EFLAGS: 00010006
[  140.526946] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  140.527402] RDX: ffff8880211e8000 RSI: ffffffff815677b7 RDI: 0000000000000005
[  140.527858] RBP: ffff888040b60000 R08: 0000000000000005 R09: 0000000000000001
[  140.528316] R10: 0000000000000000 R11: ffffffff865b605b R12: ffff88803fdf5400
[  140.528767] R13: ffff88806cf3d2c0 R14: ffffffff8547d200 R15: 0000000000000002
[  140.529240] FS:  00007fd54be4e700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[  140.529751] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  140.530130] CR2: 0000555555da1c18 CR3: 0000000018148000 CR4: 0000000000350ee0
[  140.530591] Call Trace:
[  140.530767]  <TASK>
[  140.530926]  ctx_sched_out+0x8f1/0xc10
[  140.531193]  __perf_event_task_sched_out+0x6d0/0x18d0
[  140.531531]  ? lock_is_held_type+0xd7/0x130
[  140.531819]  ? __perf_cgroup_move+0x160/0x160
[  140.532122]  ? set_next_entity+0x304/0x550
[  140.532403]  ? update_curr+0x267/0x740
[  140.532669]  ? lock_is_held_type+0xd7/0x130
[  140.532956]  __schedule+0xedd/0x2470
[  140.533214]  ? io_schedule_timeout+0x150/0x150
[  140.533522]  ? rcu_read_lock_sched_held+0x3e/0x80
[  140.533854]  schedule+0xda/0x1b0
[  140.534094]  exit_to_user_mode_prepare+0x114/0x1a0
[  140.534421]  syscall_exit_to_user_mode+0x19/0x40
[  140.534760]  do_syscall_64+0x48/0x90
[  140.535016]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  140.535362] RIP: 0033:0x7fd54e8d8b19
[  140.535618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  140.536786] RSP: 002b:00007fd54be4e218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  140.537275] RAX: 0000000000000001 RBX: 00007fd54e9ebf68 RCX: 00007fd54e8d8b19
[  140.537734] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd54e9ebf6c
[  140.538207] RBP: 00007fd54e9ebf60 R08: 000000000000000e R09: 0000000000000000
[  140.538671] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fd54e9ebf6c
[  140.539150] R13: 00007ffc50b0f95f R14: 00007fd54be4e300 R15: 0000000000022000
[  140.539619]  </TASK>
[  140.539778] irq event stamp: 646
[  140.539998] hardirqs last  enabled at (645): [<ffffffff8133f8d9>] exit_to_user_mode_prepare+0x109/0x1a0
[  140.540598] hardirqs last disabled at (646): [<ffffffff84263bb5>] __schedule+0x1225/0x2470
[  140.541131] softirqs last  enabled at (408): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  140.541688] softirqs last disabled at (399): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  140.542239] ---[ end trace 0000000000000000 ]---
[  140.543585] ext2: Unknown parameter 'nolqzytemount-ro'
[  140.548375] loop2: detected capacity change from 0 to 3
[  140.555902] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  140.576923] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 1280 (only 16 groups)
[  140.616983] loop4: detected capacity change from 0 to 264192
[  140.718262] hrtimer: interrupt took 22833 ns
[  140.771583] capability: warning: `syz-executor.5' uses deprecated v2 capabilities in a way that may be insecure
[  140.777928] loop2: detected capacity change from 0 to 3
[  140.819770] ext2: Unknown parameter 'nolqzytemount-ro'
[  140.875878] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 1280 (only 16 groups)
[  140.953210] syz-executor.7 (4025) used greatest stack depth: 23768 bytes left
00:04:12 executing program 0:
getresuid(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000002140), 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB='nolqzytemount-ro,uid>\x00'/33, @ANYRESDEC=0x0, @ANYBLOB="2c726f87090000000000000044a21e23da665f753c00a51b6583c708e41dc6e779b29e83595c73b4b597c931d8841e6a8654e6b5ece945615290273ee1192ce8182dcb40cf93a10cb14c8d29ced6720d85ca27af356615707f64acc8bfd43de5fd2e9b9f1770ae6387d78238ec04b5ad48b39e6b862bc08a4136ed665fbeb7bfc50413c99d0768e936629372ea1718e0513f7d8bd786d92ce029f548824a371b38d2a3c9"])
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
setresuid(0x0, r0, 0x0)
setresuid(0xffffffffffffffff, 0x0, r0)
setresuid(0x0, r0, r0)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
r3 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x18, 0xfffffffffffffffa)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8)
keyctl$chown(0x4, r3, r4, r2)
setresuid(0x0, r1, 0x0)
setresuid(r0, r1, r0)
msgctl$IPC_RMID(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff)
syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000380)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
r7 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380))
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x6)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4000, @fd_index=0x2, 0x0, 0x5, 0x7772882d, 0x0, 0x1, {0x1, r8}}, 0x6)

00:04:12 executing program 2:
getresuid(0x0, 0x0, 0x0)
lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x9, 0x3, &(0x7f0000000540)=[{&(0x7f00000002c0)="00d9b1990017b8b525a2f6459e8afd08f100eb2a8d01c63a7191e49a16a4135e71f2585d135ab2ac630b3c5fb4ada3d6a727d79fbccb4de4def07f6d689bf7b10bee4b855772f6826da321626e2e4f652bef850fe9fdfc2942db25372381e97632813309dd65ccfdf79c610671820fd14344a3649a1449724557f6e65c24bef1580fda1466a6129060218b0854b19e4c7876c2784696469954bb904daf8db618a0c952dd3e80665df1998be14efea529f565dba143f6af2a6fb76ac9107bfbdff8d342daf1a83ba0cfa78fb8f5bc", 0xce, 0x3ff}, {&(0x7f00000003c0)="12704339b6985cffc49fef9f9eba1f0efcd123482c53009799e245ec3e186e2c69fdd99853c783565ede625f408fa4edb1f6dd63def78747b0d75086e16ab87341affe0a23e3b509028c1d2059cc5e1ad69fb470e48c0d89ee", 0x59, 0x8}, {&(0x7f0000000440)="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", 0xfd, 0x380}], 0x2b4c020, &(0x7f0000000680)={[], [{@fowner_eq={'fowner', 0x3d, r0}}, {@appraise_type}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]})
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000002140), 0x80, &(0x7f0000002280)={[{@nolazytime}, {@errors_remount}], [{@uid_gt}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]})
msgctl$IPC_RMID(0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6}}, &(0x7f0000000180)=0xe8)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x72)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r3=>0x0}, &(0x7f0000000140)=0xc)
syz_open_procfs(r3, &(0x7f00000001c0)='net/if_inet6\x00')
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xff, 0x0, 0x4e, 0x4, 0x0, 0x1, 0x40020, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x40, 0x5, 0x3, 0x0, 0x849, 0x5, 0x8001, 0x0, 0x9, 0x0, 0xd7}, r3, 0x9, r2, 0x3)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x1, r1, 0x0, 0xee00, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7465, 0xfff, 0x7, 0x6, 0xfff, r3, 0xffffffffffffffff})
syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff)

00:04:12 executing program 4:
r0 = syz_io_uring_setup(0x1e87, &(0x7f0000000000)={0x0, 0x51f2, 0x10, 0x3, 0x29b}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r1=>0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x20)
syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1, 0x0, r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, &(0x7f0000000240)='./file0\x00', 0x4, 0x400}, 0x9)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000e70000/0x4000)=nil, 0x4000, 0x0, 0x80010, r0, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000c16000/0x4000)=nil, 0x4000, 0x3000006, 0x10, r2, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f00000027c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r2, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000002600)=[{&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000380)=""/5, 0x5}, {&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/147, 0x93}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/255, 0xff}], 0x8, &(0x7f0000002680)=""/235, 0xeb}, 0x0, 0x2000, 0x0, {0x2}}, 0x1)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000002800))
r6 = syz_io_uring_setup(0x4bd4, &(0x7f0000002840)={0x0, 0x932f, 0x4, 0x1, 0x2cc, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f4a000/0x1000)=nil, &(0x7f00000028c0)=<r7=>0x0, &(0x7f0000002900))
pipe(&(0x7f0000002940)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_setup(0x479e, &(0x7f0000002980)={0x0, 0xa54b, 0x2, 0x2, 0xdd, 0x0, r8}, &(0x7f0000f79000/0x4000)=nil, &(0x7f0000ccc000/0x1000)=nil, &(0x7f0000002a00)=<r10=>0x0, &(0x7f0000002a40)=<r11=>0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r1, &(0x7f0000002b40)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r9, &(0x7f0000002a80)=0x80, &(0x7f0000002ac0)=@isdn, 0x0, 0x80000, 0x0, {0x0, r12}}, 0x9)
r13 = syz_mount_image$vfat(&(0x7f0000002b80), &(0x7f0000002bc0)='./file0/file0\x00', 0x7fffffff, 0x1, &(0x7f0000002d00)=[{&(0x7f0000002c00)="f89ed34f52f834af56c63e2a8f3c2280a0cb3ae36be1d06045283440796df1d8de494919d53aa8778e28daf5ae27d98b205ae303182e837a942aa6c37e7aa1c6ddc8eb21ebbd1c1f89f5b6566ff6d5dfb1cfc153476a33c3d2c09cd13ea380de07d09c23fe384dda5606310fd134df882bcca0ca507425873a3157e741a85e6678738f18be67c7d6410263a2117326f8bf918f1313253d401b6b9cb979458f3c19de3c1a57895bd0b59e7047a153651d9a6dd196a578c1a8d84ef29713d145c6c59f71625395f5482292dc36253b812de61d42bd34fc835df4fb9ecfba5bef6b0123", 0xe2, 0xf85}], 0x2900810, &(0x7f0000002d40)={[{@shortname_win95}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@uid}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_win95}, {@utf8no}, {@shortname_win95}, {@utf8no}], [{@obj_user}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'%'}}, {@fowner_gt={'fowner>', r3}}]})
r14 = epoll_create(0x0)
tee(0xffffffffffffffff, r14, 0x8, 0x0)
r15 = mmap$IORING_OFF_SQES(&(0x7f0000cf8000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r9, 0x10000000)
r16 = openat$random(0xffffffffffffff9c, &(0x7f0000002e40), 0x2000, 0x0)
syz_io_uring_submit(r10, r15, &(0x7f0000002e80)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r16, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0x0)
close_range(r16, r13, 0x0)
syz_io_uring_submit(r7, r11, &(0x7f0000003000)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f0000002ec0), &(0x7f0000002fc0)='./file0\x00', 0x0, 0x4000, 0x1, {0x0, r12}}, 0xfffffffd)

00:04:12 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x2}, {0x6}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x61c2, &(0x7f0000000080)={0x0, 0x6cd8, 0x0, 0x1, 0x35b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x0, 0x4000}}, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x500, 0x0, 0x8})

00:04:12 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="bc0774f1680e0f30fa2f5abbed2a463897bc1b16b746e00eeb589f436a37c8582a462ae92da14ebcf5ac6f2e889ca4923471a581a49463e28b0cd3052b972da754df40c689ce9a7b8bb9534eca4b0a61fee3fe8932d1106e110ec94797d41c4b64f298b42bac50b60c9f5d55d746b33bc92fc03463aea1c51d7cc624f094961557ce0ccaaa2aaf385465a9b04bcfe840110ed0e62624c2ce2a36e216d6ac8907db73f1bcebd90b084d1506d6b1d6125339af8831c82d5a58d882d925a84e1c6fd7ed33a869aab81e2abdbe667b639ea1e39eb61e0cd75ed81af68e3586f5d974d6d40e5422", 0xe5}, {&(0x7f0000000300)="10570415256e75228dd7c0bccb7bd13b03a4aac64608ad6090133982a236284e013c4ad894fd2f1c34c69cafdf3a3b5ef4414bd866a9f82a07ac1b7a17c5bae623b20313144a1e47d76c55d6ac2a942533ed511b91347f0cbff5d5d28473707f5cc1756b2343a7018f9fa22b95d31988c2be2e1f07e117aa7a8ce1bbd9ca97bb03513a4d2452f29e892586b6ca93aa0056d4ae75774d3351ae42c5a2dbc44827545279c7fa08c8ec5d64b5c82ef657fba8", 0xb1}, {&(0x7f00000003c0)="ad7c37f35965fe2616e9774d94ed837508c338e7429a249b22cdbca206d69e0214de5d57558e1f6b1a2577fa45474871949e88c27fe370b92e6905aabd94e80e4a5b9d87525d71ec23372ad98aa77a1430a02fe38296a9cf86847897980a3b47997cbdc0fe014fd36259fb56d2848b", 0x6f}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d351b4a240e9ddada4f4f477383c941632b7648c81a278616c28319bceb94770b6c39062ab4df918cae1be3dea2590f664434dd339baf9623439710e605550f6dbe", 0xed}], 0x4, r1)
r2 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2d5})
r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "67f28f824b25d08c02eddd4d3931ff2016215f14c2fd4e4a079c98befb6485e815948411dcc1c0a111043f9ab3cd82b71275b2aad4f99fce01a0951b7bf59006"}, 0x48, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='trusted\x00', 0x0)
add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r3)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe)
syz_io_uring_setup(0x22d2, &(0x7f0000000580)={0x0, 0x2799, 0x0, 0x3, 0x13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x426000, 0x110)

00:04:12 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x2}, {0x6}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x61c2, &(0x7f0000000080)={0x0, 0x6cd8, 0x0, 0x1, 0x35b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x0, 0x4000}}, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x500, 0x0, 0x8})

00:04:13 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0x2}, {0x6}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
syz_io_uring_setup(0xeb1, &(0x7f0000000200), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x61c2, &(0x7f0000000080)={0x0, 0x6cd8, 0x0, 0x1, 0x35b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@qipcrtr={0x2a, 0x0, 0x4000}}, 0x8000)
[  140.981057] loop4: detected capacity change from 0 to 264192
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0x500, 0x0, 0x8})

00:04:13 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="bc0774f1680e0f30fa2f5abbed2a463897bc1b16b746e00eeb589f436a37c8582a462ae92da14ebcf5ac6f2e889ca4923471a581a49463e28b0cd3052b972da754df40c689ce9a7b8bb9534eca4b0a61fee3fe8932d1106e110ec94797d41c4b64f298b42bac50b60c9f5d55d746b33bc92fc03463aea1c51d7cc624f094961557ce0ccaaa2aaf385465a9b04bcfe840110ed0e62624c2ce2a36e216d6ac8907db73f1bcebd90b084d1506d6b1d6125339af8831c82d5a58d882d925a84e1c6fd7ed33a869aab81e2abdbe667b639ea1e39eb61e0cd75ed81af68e3586f5d974d6d40e5422", 0xe5}, {&(0x7f0000000300)="10570415256e75228dd7c0bccb7bd13b03a4aac64608ad6090133982a236284e013c4ad894fd2f1c34c69cafdf3a3b5ef4414bd866a9f82a07ac1b7a17c5bae623b20313144a1e47d76c55d6ac2a942533ed511b91347f0cbff5d5d28473707f5cc1756b2343a7018f9fa22b95d31988c2be2e1f07e117aa7a8ce1bbd9ca97bb03513a4d2452f29e892586b6ca93aa0056d4ae75774d3351ae42c5a2dbc44827545279c7fa08c8ec5d64b5c82ef657fba8", 0xb1}, {&(0x7f00000003c0)="ad7c37f35965fe2616e9774d94ed837508c338e7429a249b22cdbca206d69e0214de5d57558e1f6b1a2577fa45474871949e88c27fe370b92e6905aabd94e80e4a5b9d87525d71ec23372ad98aa77a1430a02fe38296a9cf86847897980a3b47997cbdc0fe014fd36259fb56d2848b", 0x6f}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d351b4a240e9ddada4f4f477383c941632b7648c81a278616c28319bceb94770b6c39062ab4df918cae1be3dea2590f664434dd339baf9623439710e605550f6dbe", 0xed}], 0x4, r1)
r2 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2d5})
r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "67f28f824b25d08c02eddd4d3931ff2016215f14c2fd4e4a079c98befb6485e815948411dcc1c0a111043f9ab3cd82b71275b2aad4f99fce01a0951b7bf59006"}, 0x48, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='trusted\x00', 0x0)
add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r3)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe)
syz_io_uring_setup(0x22d2, &(0x7f0000000580)={0x0, 0x2799, 0x0, 0x3, 0x13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x426000, 0x110)

[  141.009737] EXT4-fs warning (device sda): verify_group_input:150: Cannot add at group 1280 (only 16 groups)
00:04:22 executing program 0:
syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[])
mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x80000}, 0x20)

00:04:22 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="bc0774f1680e0f30fa2f5abbed2a463897bc1b16b746e00eeb589f436a37c8582a462ae92da14ebcf5ac6f2e889ca4923471a581a49463e28b0cd3052b972da754df40c689ce9a7b8bb9534eca4b0a61fee3fe8932d1106e110ec94797d41c4b64f298b42bac50b60c9f5d55d746b33bc92fc03463aea1c51d7cc624f094961557ce0ccaaa2aaf385465a9b04bcfe840110ed0e62624c2ce2a36e216d6ac8907db73f1bcebd90b084d1506d6b1d6125339af8831c82d5a58d882d925a84e1c6fd7ed33a869aab81e2abdbe667b639ea1e39eb61e0cd75ed81af68e3586f5d974d6d40e5422", 0xe5}, {&(0x7f0000000300)="10570415256e75228dd7c0bccb7bd13b03a4aac64608ad6090133982a236284e013c4ad894fd2f1c34c69cafdf3a3b5ef4414bd866a9f82a07ac1b7a17c5bae623b20313144a1e47d76c55d6ac2a942533ed511b91347f0cbff5d5d28473707f5cc1756b2343a7018f9fa22b95d31988c2be2e1f07e117aa7a8ce1bbd9ca97bb03513a4d2452f29e892586b6ca93aa0056d4ae75774d3351ae42c5a2dbc44827545279c7fa08c8ec5d64b5c82ef657fba8", 0xb1}, {&(0x7f00000003c0)="ad7c37f35965fe2616e9774d94ed837508c338e7429a249b22cdbca206d69e0214de5d57558e1f6b1a2577fa45474871949e88c27fe370b92e6905aabd94e80e4a5b9d87525d71ec23372ad98aa77a1430a02fe38296a9cf86847897980a3b47997cbdc0fe014fd36259fb56d2848b", 0x6f}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d351b4a240e9ddada4f4f477383c941632b7648c81a278616c28319bceb94770b6c39062ab4df918cae1be3dea2590f664434dd339baf9623439710e605550f6dbe", 0xed}], 0x4, r1)
r2 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2d5})
r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "67f28f824b25d08c02eddd4d3931ff2016215f14c2fd4e4a079c98befb6485e815948411dcc1c0a111043f9ab3cd82b71275b2aad4f99fce01a0951b7bf59006"}, 0x48, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='trusted\x00', 0x0)
add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r3)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe)
syz_io_uring_setup(0x22d2, &(0x7f0000000580)={0x0, 0x2799, 0x0, 0x3, 0x13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x426000, 0x110)

00:04:22 executing program 6:
r0 = semget(0x0, 0x0, 0x0)
r1 = semget$private(0x0, 0x4, 0x0)
semtimedop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x10)
semctl$SEM_INFO(r1, 0x4, 0x13, &(0x7f00000000c0)=""/233)
r2 = semget(0x3, 0x4, 0x244)
r3 = semget$private(0x0, 0x4, 0x0)
r4 = semget(0x3, 0x3, 0x201)
semctl$SEM_INFO(r4, 0x4, 0x13, &(0x7f0000000380)=""/254)
semtimedop(r1, &(0x7f00000001c0)=[{0x3, 0x6, 0x800}, {0x3, 0xb4}], 0x2, &(0x7f0000000480))
semtimedop(r3, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}], 0x1, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x10)
clock_gettime(0x0, &(0x7f0000000200)={<r5=>0x0, <r6=>0x0})
semtimedop(r0, &(0x7f0000000340)=[{0x3, 0x25a, 0x800}, {0x4, 0x20, 0x1800}, {0x3, 0xd9c0, 0x1000}, {0x2, 0xf4a5, 0x1000}, {0x3, 0xff, 0x1800}, {0x3, 0x6}, {0x2, 0xff5a}, {0x4, 0x1, 0x1800}, {0x3, 0x1, 0xc00}], 0x9, &(0x7f0000000240)={r5, r6+10000000})
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000000)=""/91)
semctl$SEM_INFO(0xffffffffffffffff, 0x4, 0x13, &(0x7f0000000080)=""/5)
semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x10)
semctl$GETZCNT(0x0, 0x4, 0xf, &(0x7f00000004c0)=""/21)
semctl$GETPID(0x0, 0x2, 0xb, &(0x7f0000000280)=""/156)

00:04:22 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x8000)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0xc0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1a}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040002}, 0xc2)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20048081)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan4\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan4\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008080)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x6000040}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x90111030}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, r1, 0x201, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x81}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xf}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x800)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r6)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r9, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x1c}}, 0x881)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r6)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r10, 0xc25ed4c62255590c, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfc000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x40044)

00:04:22 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fsopen(&(0x7f0000000140)='devtmpfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x7, 0x0, 0x0, 0x0)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)=0x3)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x4, 0x5, 0x88, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4a1, 0x2, @perf_config_ext={0x9, 0xe2a}, 0x0, 0x0, 0x2, 0x5, 0x1ff, 0x5, 0x0, 0x0, 0x1, 0x0, 0x400}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
r2 = fcntl$getown(r0, 0x9)
tkill(r2, 0x27)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xff, 0x0, 0x4e, 0x4, 0x0, 0x1, 0x40020, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x40, 0x5, 0x3, 0x0, 0x849, 0x5, 0x8001, 0x0, 0x9, 0x0, 0xd7}, 0x0, 0x9, 0xffffffffffffffff, 0x3)
ptrace(0x4207, 0x0)
tkill(0x0, 0x16)
r3 = openat$cgroup(r0, &(0x7f0000000c40)='syz1\x00', 0x200002, 0x0)
fallocate(r3, 0x4, 0x4, 0x7fff)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x1})
ptrace(0xffffffffffffffff, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x100034)
mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="5472616e733dff63702c706f72743d3078303030303030303030303030346532342c616669643d3078303030303030303030303030303030302c616669643d3078303030303030303043303030303030342c616363657343e8d7c82f2bf59be90bf5137c53733d757365722c6f626a5f747970653d2f70726f632f6c6f636b73002c726f6f7463050a0000000000f508cf725f752c6f626a5f747970653d2c726f6f74636f6e746578743d8b5faee252d371723bf9c43a484a7e8af5fc1ac1b1776da62a9155cbdae027a2676ac0e3756208249cccddc658ea21a90ee1e5627386a848858d57c070ec74bc79db2ac78a00ffffecf65ffab43aafc8e683d9b233ecf3e6d0e2bb261da3d9447f88ee75eb8a47c993c306d410e876fbcd4c99e736ceef486d6611677a3a1f21824c6f8d85d1d9f1b9f74c2386bf3a812f29f3fba337c7abb289edaa42c9bad855627f0e8c5d0ada6e4e7f0000000000000000000000000000000044fa77ee041dbabca34779121efce93c5daec811252bdbfc8b64ad67597968e12829f2fbf65f19c9f88f87b14dbed8ada2071f6e535508a0598351c0b1d291b500b3bd50121f0564fe2354fa1a51cfd2c48df01bab9b01fb46a67b5366baa80115"])

00:04:22 executing program 4:
r0 = syz_io_uring_setup(0x1e87, &(0x7f0000000000)={0x0, 0x51f2, 0x10, 0x3, 0x29b}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=<r1=>0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x8040, 0x20)
syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1, 0x0, r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, &(0x7f0000000240)='./file0\x00', 0x4, 0x400}, 0x9)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000e70000/0x4000)=nil, 0x4000, 0x0, 0x80010, r0, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000c16000/0x4000)=nil, 0x4000, 0x3000006, 0x10, r2, 0x10000000)
syz_io_uring_submit(r4, r5, &(0x7f00000027c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r2, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000002600)=[{&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000380)=""/5, 0x5}, {&(0x7f00000003c0)=""/22, 0x16}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/147, 0x93}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/255, 0xff}], 0x8, &(0x7f0000002680)=""/235, 0xeb}, 0x0, 0x2000, 0x0, {0x2}}, 0x1)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000002800))
r6 = syz_io_uring_setup(0x4bd4, &(0x7f0000002840)={0x0, 0x932f, 0x4, 0x1, 0x2cc, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f4a000/0x1000)=nil, &(0x7f00000028c0)=<r7=>0x0, &(0x7f0000002900))
pipe(&(0x7f0000002940)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_setup(0x479e, &(0x7f0000002980)={0x0, 0xa54b, 0x2, 0x2, 0xdd, 0x0, r8}, &(0x7f0000f79000/0x4000)=nil, &(0x7f0000ccc000/0x1000)=nil, &(0x7f0000002a00)=<r10=>0x0, &(0x7f0000002a40)=<r11=>0x0)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r1, &(0x7f0000002b40)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r9, &(0x7f0000002a80)=0x80, &(0x7f0000002ac0)=@isdn, 0x0, 0x80000, 0x0, {0x0, r12}}, 0x9)
r13 = syz_mount_image$vfat(&(0x7f0000002b80), &(0x7f0000002bc0)='./file0/file0\x00', 0x7fffffff, 0x1, &(0x7f0000002d00)=[{&(0x7f0000002c00)="f89ed34f52f834af56c63e2a8f3c2280a0cb3ae36be1d06045283440796df1d8de494919d53aa8778e28daf5ae27d98b205ae303182e837a942aa6c37e7aa1c6ddc8eb21ebbd1c1f89f5b6566ff6d5dfb1cfc153476a33c3d2c09cd13ea380de07d09c23fe384dda5606310fd134df882bcca0ca507425873a3157e741a85e6678738f18be67c7d6410263a2117326f8bf918f1313253d401b6b9cb979458f3c19de3c1a57895bd0b59e7047a153651d9a6dd196a578c1a8d84ef29713d145c6c59f71625395f5482292dc36253b812de61d42bd34fc835df4fb9ecfba5bef6b0123", 0xe2, 0xf85}], 0x2900810, &(0x7f0000002d40)={[{@shortname_win95}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@uid}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@shortname_win95}, {@utf8no}, {@shortname_win95}, {@utf8no}], [{@obj_user}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'%'}}, {@fowner_gt={'fowner>', r3}}]})
r14 = epoll_create(0x0)
tee(0xffffffffffffffff, r14, 0x8, 0x0)
r15 = mmap$IORING_OFF_SQES(&(0x7f0000cf8000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r9, 0x10000000)
r16 = openat$random(0xffffffffffffff9c, &(0x7f0000002e40), 0x2000, 0x0)
syz_io_uring_submit(r10, r15, &(0x7f0000002e80)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r16, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0x0)
close_range(r16, r13, 0x0)
syz_io_uring_submit(r7, r11, &(0x7f0000003000)=@IORING_OP_STATX={0x15, 0x3, 0x0, r8, &(0x7f0000002ec0), &(0x7f0000002fc0)='./file0\x00', 0x0, 0x4000, 0x1, {0x0, r12}}, 0xfffffffd)

00:04:22 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x7fffffe, 0x0)
r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r1)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="bc0774f1680e0f30fa2f5abbed2a463897bc1b16b746e00eeb589f436a37c8582a462ae92da14ebcf5ac6f2e889ca4923471a581a49463e28b0cd3052b972da754df40c689ce9a7b8bb9534eca4b0a61fee3fe8932d1106e110ec94797d41c4b64f298b42bac50b60c9f5d55d746b33bc92fc03463aea1c51d7cc624f094961557ce0ccaaa2aaf385465a9b04bcfe840110ed0e62624c2ce2a36e216d6ac8907db73f1bcebd90b084d1506d6b1d6125339af8831c82d5a58d882d925a84e1c6fd7ed33a869aab81e2abdbe667b639ea1e39eb61e0cd75ed81af68e3586f5d974d6d40e5422", 0xe5}, {&(0x7f0000000300)="10570415256e75228dd7c0bccb7bd13b03a4aac64608ad6090133982a236284e013c4ad894fd2f1c34c69cafdf3a3b5ef4414bd866a9f82a07ac1b7a17c5bae623b20313144a1e47d76c55d6ac2a942533ed511b91347f0cbff5d5d28473707f5cc1756b2343a7018f9fa22b95d31988c2be2e1f07e117aa7a8ce1bbd9ca97bb03513a4d2452f29e892586b6ca93aa0056d4ae75774d3351ae42c5a2dbc44827545279c7fa08c8ec5d64b5c82ef657fba8", 0xb1}, {&(0x7f00000003c0)="ad7c37f35965fe2616e9774d94ed837508c338e7429a249b22cdbca206d69e0214de5d57558e1f6b1a2577fa45474871949e88c27fe370b92e6905aabd94e80e4a5b9d87525d71ec23372ad98aa77a1430a02fe38296a9cf86847897980a3b47997cbdc0fe014fd36259fb56d2848b", 0x6f}, {&(0x7f0000000440)="549a4274cb8b52a1fa776ac8a0913bda459e4112ab3d8f12cfe37eac4a269a173277e13f876ec6ed59d4962a3164cff26503c524aee1891bc0ab27a8f01374510ab3d8b90e7c2872cbf57d1571b8ae3929640904910b3aa40313b81d791c4a4e19ae6795a39902bad88213a294a484edaa1de5b40fb4571850a0adc50236121bdf67c254c46a363fa7d4332857a55f27b01ccb9e2a3e96c872e2b5fb70ebbab7dd35d658ef31f82657895c5d351b4a240e9ddada4f4f477383c941632b7648c81a278616c28319bceb94770b6c39062ab4df918cae1be3dea2590f664434dd339baf9623439710e605550f6dbe", 0xed}], 0x4, r1)
r2 = io_uring_setup(0x454c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2d5})
r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000240)={0x0, "67f28f824b25d08c02eddd4d3931ff2016215f14c2fd4e4a079c98befb6485e815948411dcc1c0a111043f9ab3cd82b71275b2aad4f99fce01a0951b7bf59006"}, 0x48, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='trusted\x00', 0x0)
add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r3)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0)
r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="6ffc25721cc9dc764319d54dac5b2ada2c5f6c9df78c125ee322784fa59e8d9ddc71996c417ec62000b6c3b9988a734588bc9336bd89d9f59d68d93b9a56c910436c7877860f050764a4d278b3711e6a88e58a1b7600a5c401c48b0f1cb5d6144d8e6c3aa7102222684bfc7c14f69dee4ab83475356a51a59b9a155244bb2e1ecab721b8f8e3924b938321b5e4334a44536eacd64ef97c4582005b866e58d9269fcbd907f32a4f7d021580305ced96f841f0c9c745610aea71374ccbd1e3", 0xbe)
syz_io_uring_setup(0x22d2, &(0x7f0000000580)={0x0, 0x2799, 0x0, 0x3, 0x13}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000600), &(0x7f0000000640))
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r4, 0x0)
sendfile(r0, r0, 0x0, 0x5f1)
openat(r0, &(0x7f0000000000)='./file1\x00', 0x426000, 0x110)

00:04:22 executing program 3:
ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x401, 0x1400}, {0x0, 0xffff}], 0x2, 0x0)
unshare(0x48040080)


VM DIAGNOSIS:
00:04:12  Registers:
info registers vcpu 0
RAX=0000000040000000 RBX=ffff88800e1c9600 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000007 RDI=ffff88800e1c9640 RBP=ffff88800e1c9610 RSP=ffff888040b27a78
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000007 R13=0000000000000000 R14=ffff88800e1c9640 R15=0000000000000001
RIP=ffffffff810a62c4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555556158400 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f68012b8070 CR3=000000000e556000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff823c077c RDI=ffffffff8765c9e0 RBP=ffffffff8765c9a0 RSP=ffff888040b57698
R8 =0000000000000001 R9 =ffff888040b57623 R10=ffffed100816aec4 R11=0000000000000001
R12=0000000000000041 R13=ffffffff8765c9a0 R14=ffffffff8765c9f0 R15=ffffffff8765cc50
RIP=ffffffff823c07d1 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fd54be4e700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555555da1c18 CR3=0000000018148000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007fd54e9bf7c000007fd54e9bf7c8
XMM02=00007fd54e9bf7e000007fd54e9bf7c0 XMM03=00007fd54e9bf7c800007fd54e9bf7c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000