
Debian GNU/Linux 11 syzkaller ttyS0

Warning: Permanently added '[localhost]:58042' (ECDSA) to the list of known hosts.
2022/09/24 10:52:28 fuzzer started
2022/09/24 10:52:28 dialing manager at localhost:38881
syzkaller login: [   37.753450] cgroup: Unknown subsys name 'net'
[   37.823107] cgroup: Unknown subsys name 'rlimit'
2022/09/24 10:52:43 syscalls: 2215
2022/09/24 10:52:43 code coverage: enabled
2022/09/24 10:52:43 comparison tracing: enabled
2022/09/24 10:52:43 extra coverage: enabled
2022/09/24 10:52:43 setuid sandbox: enabled
2022/09/24 10:52:43 namespace sandbox: enabled
2022/09/24 10:52:43 Android sandbox: enabled
2022/09/24 10:52:43 fault injection: enabled
2022/09/24 10:52:43 leak checking: enabled
2022/09/24 10:52:43 net packet injection: enabled
2022/09/24 10:52:43 net device setup: enabled
2022/09/24 10:52:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/09/24 10:52:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/09/24 10:52:43 USB emulation: enabled
2022/09/24 10:52:43 hci packet injection: enabled
2022/09/24 10:52:43 wifi device emulation: failed to parse kernel version (6.0.0-rc6-next-20220923                                          )
2022/09/24 10:52:43 802.15.4 emulation: enabled
2022/09/24 10:52:43 fetching corpus: 50, signal 26269/28053 (executing program)
2022/09/24 10:52:43 fetching corpus: 100, signal 37775/41157 (executing program)
2022/09/24 10:52:43 fetching corpus: 150, signal 42404/47359 (executing program)
2022/09/24 10:52:43 fetching corpus: 200, signal 50405/56756 (executing program)
2022/09/24 10:52:43 fetching corpus: 250, signal 59264/66841 (executing program)
2022/09/24 10:52:43 fetching corpus: 300, signal 62905/71781 (executing program)
2022/09/24 10:52:44 fetching corpus: 350, signal 66305/76480 (executing program)
2022/09/24 10:52:44 fetching corpus: 400, signal 69776/81167 (executing program)
2022/09/24 10:52:44 fetching corpus: 450, signal 75540/87867 (executing program)
2022/09/24 10:52:44 fetching corpus: 500, signal 78828/92250 (executing program)
2022/09/24 10:52:44 fetching corpus: 550, signal 81239/95789 (executing program)
2022/09/24 10:52:44 fetching corpus: 600, signal 83514/99140 (executing program)
2022/09/24 10:52:44 fetching corpus: 650, signal 87165/103727 (executing program)
2022/09/24 10:52:44 fetching corpus: 700, signal 91172/108516 (executing program)
2022/09/24 10:52:44 fetching corpus: 750, signal 95509/113558 (executing program)
2022/09/24 10:52:45 fetching corpus: 800, signal 101534/119992 (executing program)
2022/09/24 10:52:45 fetching corpus: 850, signal 102885/122290 (executing program)
2022/09/24 10:52:45 fetching corpus: 900, signal 104690/124927 (executing program)
2022/09/24 10:52:45 fetching corpus: 950, signal 106857/127850 (executing program)
2022/09/24 10:52:45 fetching corpus: 1000, signal 108342/130229 (executing program)
2022/09/24 10:52:45 fetching corpus: 1050, signal 111788/134156 (executing program)
2022/09/24 10:52:45 fetching corpus: 1100, signal 113755/136874 (executing program)
2022/09/24 10:52:45 fetching corpus: 1150, signal 114874/138812 (executing program)
2022/09/24 10:52:46 fetching corpus: 1200, signal 117435/141873 (executing program)
2022/09/24 10:52:46 fetching corpus: 1250, signal 120270/145218 (executing program)
2022/09/24 10:52:46 fetching corpus: 1300, signal 122025/147609 (executing program)
2022/09/24 10:52:46 fetching corpus: 1350, signal 123034/149375 (executing program)
2022/09/24 10:52:46 fetching corpus: 1400, signal 125668/152432 (executing program)
2022/09/24 10:52:46 fetching corpus: 1450, signal 127673/155001 (executing program)
2022/09/24 10:52:46 fetching corpus: 1500, signal 129588/157316 (executing program)
2022/09/24 10:52:46 fetching corpus: 1550, signal 130629/159044 (executing program)
2022/09/24 10:52:47 fetching corpus: 1600, signal 131427/160548 (executing program)
2022/09/24 10:52:47 fetching corpus: 1650, signal 133325/162848 (executing program)
2022/09/24 10:52:47 fetching corpus: 1700, signal 134668/164749 (executing program)
2022/09/24 10:52:47 fetching corpus: 1750, signal 136404/166835 (executing program)
2022/09/24 10:52:47 fetching corpus: 1800, signal 138308/169062 (executing program)
2022/09/24 10:52:47 fetching corpus: 1850, signal 139846/170941 (executing program)
2022/09/24 10:52:47 fetching corpus: 1900, signal 141230/172745 (executing program)
2022/09/24 10:52:47 fetching corpus: 1950, signal 142510/174497 (executing program)
2022/09/24 10:52:48 fetching corpus: 2000, signal 143642/176055 (executing program)
2022/09/24 10:52:48 fetching corpus: 2050, signal 145133/177820 (executing program)
2022/09/24 10:52:48 fetching corpus: 2100, signal 147285/180088 (executing program)
2022/09/24 10:52:48 fetching corpus: 2150, signal 148588/181714 (executing program)
2022/09/24 10:52:48 fetching corpus: 2200, signal 150652/183786 (executing program)
2022/09/24 10:52:48 fetching corpus: 2250, signal 151991/185405 (executing program)
2022/09/24 10:52:48 fetching corpus: 2300, signal 152775/186606 (executing program)
2022/09/24 10:52:49 fetching corpus: 2350, signal 153697/187837 (executing program)
2022/09/24 10:52:49 fetching corpus: 2400, signal 155436/189645 (executing program)
2022/09/24 10:52:49 fetching corpus: 2450, signal 156374/190973 (executing program)
2022/09/24 10:52:49 fetching corpus: 2500, signal 158050/192657 (executing program)
2022/09/24 10:52:49 fetching corpus: 2550, signal 159242/194051 (executing program)
2022/09/24 10:52:49 fetching corpus: 2600, signal 160339/195348 (executing program)
2022/09/24 10:52:49 fetching corpus: 2650, signal 161190/196474 (executing program)
2022/09/24 10:52:50 fetching corpus: 2700, signal 162277/197694 (executing program)
2022/09/24 10:52:50 fetching corpus: 2750, signal 162815/198646 (executing program)
2022/09/24 10:52:50 fetching corpus: 2800, signal 163440/199630 (executing program)
2022/09/24 10:52:50 fetching corpus: 2850, signal 164115/200622 (executing program)
2022/09/24 10:52:50 fetching corpus: 2900, signal 165198/201803 (executing program)
2022/09/24 10:52:50 fetching corpus: 2950, signal 166363/203008 (executing program)
2022/09/24 10:52:50 fetching corpus: 3000, signal 167773/204354 (executing program)
2022/09/24 10:52:50 fetching corpus: 3050, signal 168121/205123 (executing program)
2022/09/24 10:52:50 fetching corpus: 3100, signal 168818/206053 (executing program)
2022/09/24 10:52:51 fetching corpus: 3150, signal 169340/206932 (executing program)
2022/09/24 10:52:51 fetching corpus: 3200, signal 169895/207815 (executing program)
2022/09/24 10:52:51 fetching corpus: 3250, signal 170366/208622 (executing program)
2022/09/24 10:52:51 fetching corpus: 3300, signal 171293/209636 (executing program)
2022/09/24 10:52:51 fetching corpus: 3350, signal 171873/210459 (executing program)
2022/09/24 10:52:51 fetching corpus: 3400, signal 172316/211251 (executing program)
2022/09/24 10:52:51 fetching corpus: 3450, signal 173823/212574 (executing program)
2022/09/24 10:52:51 fetching corpus: 3500, signal 174617/213463 (executing program)
2022/09/24 10:52:52 fetching corpus: 3550, signal 175507/214368 (executing program)
2022/09/24 10:52:52 fetching corpus: 3600, signal 176332/215264 (executing program)
2022/09/24 10:52:52 fetching corpus: 3650, signal 177216/216116 (executing program)
2022/09/24 10:52:52 fetching corpus: 3700, signal 178251/217045 (executing program)
2022/09/24 10:52:52 fetching corpus: 3750, signal 179073/217867 (executing program)
2022/09/24 10:52:52 fetching corpus: 3800, signal 180138/218767 (executing program)
2022/09/24 10:52:52 fetching corpus: 3850, signal 180929/219509 (executing program)
2022/09/24 10:52:52 fetching corpus: 3900, signal 181547/220204 (executing program)
2022/09/24 10:52:52 fetching corpus: 3950, signal 182399/221024 (executing program)
2022/09/24 10:52:53 fetching corpus: 4000, signal 183185/221776 (executing program)
2022/09/24 10:52:53 fetching corpus: 4050, signal 183601/222411 (executing program)
2022/09/24 10:52:53 fetching corpus: 4100, signal 184397/223147 (executing program)
2022/09/24 10:52:53 fetching corpus: 4150, signal 185698/224038 (executing program)
2022/09/24 10:52:53 fetching corpus: 4200, signal 186287/224740 (executing program)
2022/09/24 10:52:53 fetching corpus: 4250, signal 188003/225755 (executing program)
2022/09/24 10:52:53 fetching corpus: 4300, signal 188506/226382 (executing program)
2022/09/24 10:52:53 fetching corpus: 4350, signal 189108/227054 (executing program)
2022/09/24 10:52:53 fetching corpus: 4400, signal 190106/227755 (executing program)
2022/09/24 10:52:54 fetching corpus: 4450, signal 190757/228335 (executing program)
2022/09/24 10:52:54 fetching corpus: 4500, signal 191387/228902 (executing program)
2022/09/24 10:52:54 fetching corpus: 4550, signal 191908/229449 (executing program)
2022/09/24 10:52:54 fetching corpus: 4600, signal 192712/230059 (executing program)
2022/09/24 10:52:54 fetching corpus: 4650, signal 193983/230729 (executing program)
2022/09/24 10:52:54 fetching corpus: 4700, signal 194775/231329 (executing program)
2022/09/24 10:52:54 fetching corpus: 4750, signal 196306/232026 (executing program)
2022/09/24 10:52:54 fetching corpus: 4800, signal 197136/232525 (executing program)
2022/09/24 10:52:54 fetching corpus: 4850, signal 197583/233005 (executing program)
2022/09/24 10:52:55 fetching corpus: 4900, signal 198169/233459 (executing program)
2022/09/24 10:52:55 fetching corpus: 4950, signal 198791/233893 (executing program)
2022/09/24 10:52:55 fetching corpus: 5000, signal 199306/234407 (executing program)
2022/09/24 10:52:55 fetching corpus: 5050, signal 200620/234930 (executing program)
2022/09/24 10:52:55 fetching corpus: 5100, signal 201021/235365 (executing program)
2022/09/24 10:52:55 fetching corpus: 5150, signal 201366/235709 (executing program)
2022/09/24 10:52:55 fetching corpus: 5200, signal 202093/236140 (executing program)
2022/09/24 10:52:55 fetching corpus: 5250, signal 202492/236535 (executing program)
2022/09/24 10:52:56 fetching corpus: 5300, signal 203019/236919 (executing program)
2022/09/24 10:52:56 fetching corpus: 5350, signal 203340/237238 (executing program)
2022/09/24 10:52:56 fetching corpus: 5400, signal 203922/237608 (executing program)
2022/09/24 10:52:56 fetching corpus: 5450, signal 204627/237977 (executing program)
2022/09/24 10:52:56 fetching corpus: 5500, signal 205465/238371 (executing program)
2022/09/24 10:52:56 fetching corpus: 5550, signal 206155/238719 (executing program)
2022/09/24 10:52:56 fetching corpus: 5600, signal 206717/239039 (executing program)
2022/09/24 10:52:56 fetching corpus: 5650, signal 207372/239332 (executing program)
2022/09/24 10:52:56 fetching corpus: 5700, signal 208261/239679 (executing program)
2022/09/24 10:52:57 fetching corpus: 5750, signal 208851/239948 (executing program)
2022/09/24 10:52:57 fetching corpus: 5800, signal 209302/240234 (executing program)
2022/09/24 10:52:57 fetching corpus: 5850, signal 209821/240496 (executing program)
2022/09/24 10:52:57 fetching corpus: 5900, signal 210326/240768 (executing program)
2022/09/24 10:52:57 fetching corpus: 5950, signal 211009/240939 (executing program)
2022/09/24 10:52:57 fetching corpus: 6000, signal 211471/240942 (executing program)
2022/09/24 10:52:57 fetching corpus: 6050, signal 211944/240945 (executing program)
2022/09/24 10:52:57 fetching corpus: 6100, signal 212521/240945 (executing program)
2022/09/24 10:52:58 fetching corpus: 6150, signal 213314/240945 (executing program)
2022/09/24 10:52:58 fetching corpus: 6200, signal 213674/240945 (executing program)
2022/09/24 10:52:58 fetching corpus: 6250, signal 213993/240947 (executing program)
2022/09/24 10:52:58 fetching corpus: 6283, signal 214355/240954 (executing program)
2022/09/24 10:52:58 fetching corpus: 6283, signal 214355/240954 (executing program)
2022/09/24 10:53:00 starting 8 fuzzer processes
10:53:00 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '/\x00'})
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f00000018c0)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000001780)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000140)=""/130, 0x82}, {0xffffffffffffffff}], 0x3, &(0x7f0000000240)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000012c0)=""/46, 0x2e}, 0x9}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001300)=""/9, 0x9}], 0x1}, 0x4fc}, {{&(0x7f0000001380)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001400)=""/21, 0x15}], 0x1, &(0x7f0000001480)}, 0x3f}, {{&(0x7f00000014c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001540)=""/30, 0x1e}, {&(0x7f0000001580)=""/150, 0x96}, {&(0x7f0000001640)=""/31, 0x1f}], 0x3, &(0x7f00000016c0)=""/157, 0x9d}, 0x410}], 0x5, 0x42, &(0x7f0000001900)={r1, r2+10000000})
futex(&(0x7f0000001940)=0x2, 0xc, 0x2, &(0x7f0000001980)={0x0, 0x3938700}, &(0x7f00000019c0)=0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001a00)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {<r4=>0xee00, 0xee01}}, './file0\x00'})
r5 = getegid()
fchown(r0, r4, r5)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001a40), 0x100, 0x0)
ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000001a80))
futex(&(0x7f0000001ac0), 0xd, 0x0, &(0x7f0000001b00), &(0x7f0000001b40)=0x1, 0x1)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000001b80), 0x8)
epoll_pwait2(r3, &(0x7f0000001bc0)=[{}, {}], 0x2, &(0x7f0000001c00), &(0x7f0000001c40)={[0xfff]}, 0x8)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611)
openat$nvram(0xffffffffffffff9c, &(0x7f0000001cc0), 0x40000, 0x0)

10:53:00 executing program 0:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000))
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
setns(r0, 0x0)
fcntl$getflags(r0, 0x401)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, <r2=>0x0}})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={r2, "95f6c04c59ba89fade30da277727ca8e"})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = dup(r4)
ioctl$VT_DISALLOCATE(r5, 0x5608)
bind$inet(r5, &(0x7f00000014c0)={0x2, 0x4e21, @remote}, 0x10)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001600)=<r6=>0x0)
perf_event_open(&(0x7f0000001580)={0x4, 0x80, 0x9, 0x81, 0x7, 0x9a, 0x0, 0x9, 0x40004, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000001540), 0x2}, 0x109c1, 0x9, 0x7, 0x4, 0x401, 0x8, 0x1fc, 0x0, 0x7, 0x0, 0xffffffff80000000}, r6, 0xc, r5, 0x8)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000001640))
perf_event_open(&(0x7f0000001680)={0x5, 0x80, 0xa9, 0x0, 0x81, 0x2, 0x0, 0x312, 0x4002, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x177, 0x80}, 0x5420, 0xffffffffffff0906, 0x3ca, 0x9, 0x1000, 0x100, 0x3, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x3, r5, 0x9)
ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000001700)={0x8, 0x8, 0x1, 0x401, 0x6})
fcntl$setstatus(r4, 0x4, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x3c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44081}, 0x4004052)

10:53:00 executing program 2:
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x17c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x15c, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7}, @device_a, @device_b, @initial, {0x1, 0x7}}, {0x3, 0x0, 0x3, 0x0, 0xfc}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @device_a, @random="886e007c91ca", {0x9, 0x2}}, {0x9, 0x0, 0x3, 0x1, 0x7}}}, @ver_80211n={0x0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008094)
sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x94aaa39c9e8b7908}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan3\x00'})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x31d}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48044}, 0x44000)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r1)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:anacron_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x82}, 0x20004001)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xcc, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x30040050)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000008c0)={'wpan4\x00'})
sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r5=>0xffffffffffffffff}, './file0\x00'})
sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x108, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa72b}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "328ef2c6ea67893b2bfc17e3207985e832f8e72bf84e"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "dff2116759fbd98cf4e60b0cf969d945968a5faf55c84c2fc437"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "86308e7c6c7a67d39899b8e471663ed113413fe4b620c4"}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r6)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d80), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8080)

10:53:00 executing program 3:
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="2ee678fbef7b9d022b9ce0868b9743ea7b354ec2afc445578c114f66169c9dd832eac5be5426", 0x26)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="285d2fd9f5586b5f5636667663fe3864ae9f8192402b252c2b3833080f73dba8bf8c02f0e5a21aabe2b8b3e7", 0x2c}, {&(0x7f0000000100)="2b44041bf6fc7941df1d34a231a3f9aec65bc56e42eac7b95d2fbfcfbeebe44083535990ffe11ccf779ffa6acbb185ae0e855a04746a829b7cbe091001aa904f9aa6f99c51a21fd6558e41d27ff40cdf20de548784bba2ae1f1da24cae856fc3b6013bac27faa2f767ae36f8fae7821ddaa84ebf5aa2d1311e5f8fc6038010c31507a8f3b93ad225a4ef2f42b91ff6fe7fbf603e1ba6714ccabcecd8d5d164611bebb3a70d6306a318940b89872d34b1358946dfb4e2219424d601c2eb6efc3d459e0b19fd2e", 0xc6}, {&(0x7f0000000200)="ab68448f06bcf8b2c3332cf20ac8c7839e", 0x11}], 0x3, 0x0, 0x0, 0x4000000}, 0x20000000)
r0 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, &(0x7f0000000340)=0x80)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000380)={@remote, @loopback, 0x1, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @loopback, @empty]}, 0x24)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000880)={{}, {0x9}, 0xc, 0x0, 0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)="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", 0x1d3, 0x0, &(0x7f0000000640)={0x2, 0x10f, {0x1, 0xc, 0x8f, "fd96eaf6507f217e07494ecad0ffe2c18d08f1791ae0bcc95d00299ff960943e26218c2a336213d2f7a3a610e5903084e78716e26334d97192090935292144fdc3dc20a2fb88704c4ed455fb5c9bb2f01cfbae6849b4e740a1431390c5a245730736625afffda714abfa9bfa11294eadc9e6a63c240c2903843c82061a7f43fab3922b1d18b074c4f721306779f99a", 0x73, "3f1ee7edb9c6a02b0ac564acd13dbb438728003f26ec601de92686184b94c3e993b75b12795b6ed411e0c6341ab90582962f0a1d175223e85606784d155c839cf08321436e9cd6f8cc560538e50d329719fd7f17ec2aded4a3bf2dfe56bf82ed248ae41c920c013a70fb6207a06c4907773b61"}, 0xfc, "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"}, 0x217})
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000900)=@dstopts={0x84, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}, 0x10)
truncate(&(0x7f0000000940)='./file0\x00', 0x0)
lgetxattr(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=@random={'user.', '\x00'}, &(0x7f0000000a00), 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000a40)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x488a677db633871a}, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000ac0)='syz0\x00', 0x200002, 0x0)
r3 = io_uring_setup(0x4440, &(0x7f0000000b00)={0x0, 0x49cf, 0x8, 0x1, 0x38a})
r4 = fsopen(&(0x7f0000000b80)='ext4\x00', 0x0)
r5 = io_uring_setup(0x2cc, &(0x7f0000000bc0)={0x0, 0x9fbd, 0x20, 0x3, 0x3d1})
r6 = socket$unix(0x1, 0x5, 0x0)
sendmsg$unix(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000c40)=[@rights={{0x28, 0x1, 0x1, [r0, r1, r2, r3, r4, r0]}}, @rights={{0x1c, 0x1, 0x1, [r5, 0xffffffffffffffff, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r6, r0, r0]}}], 0x78, 0x20000004}, 0x4004841)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
getsockname(r7, &(0x7f0000000d00)=@l2tp6, &(0x7f0000000d80)=0x80)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, <r8=>r7, {0x6}}, './file0\x00'})
sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000001280)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xdc, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x401c0)

10:53:00 executing program 4:
r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x6, &(0x7f0000000540)=[{&(0x7f0000000080)="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", 0xff, 0xbce7}, {&(0x7f0000000180)="73258f7f3e58e7460f356357bde894795a014a8a45fc20082a3ba7ebca773a071bd3edbb05e10f02547767baa6588bb9dff59832bcd34c630d4bc05b486733a82b1fe0d2c155b783355af78d59a53153586db99289661de602015d17e31ac29a04d635267dc8e06ba463d53c5c7073ca5fd93d69f8f786291eb8dd7208754e16ddbd5e0c7f665cc19fa5bbf8dadcf1ee6d9a21d12460a30776d0eddc7f7d1106a157b92f609bb05ac910b0f1634cb9", 0xaf, 0x1ff}, {&(0x7f0000000240)="a70a44fb6a8cda416ac49859e8b3b178b6b5a1b1cac26165d2360a8b2d34fa3f29a504a9e956b414be1c4de1440190f0d4f215e239de7b5ce201e81cfb7e020afffef6c02b41a3cf9be8c578b5884b03e1c049bf8e9a4ba761d15e38876dbd9382686c0400afc59ddd67f973a61c573e1fdad6867000e7062ac3a5555f0a0c494f721a95e25c5cc35bf239", 0x8b, 0x45}, {&(0x7f0000000300)="a7e1a8552782a15ad14a43f498728e822ddba34d17d17be0045424e8ebd1c631763447a166b9bb04039149c9a241b67de4f07d4562824e9c86b3f50238a81b2ebf9182c552e3fbc4e06c00f4a03cd6e720fa1b099ce48b0700c61ccb5321947c5d207f15fbd6c6a9d5eb5b1cb4d8234cf82dac667f51b77af35f6abdea1ce833ce7d0a6fc9a4741387a4ac6f98e5c40d3efe97d607414ba1a764952d550896cfc9de8ce5a4b80b75232284dc91f7f8f94f475794b23ac00de46ca1159f74a9adf1f50902a34e11402c1d2bafbbd681a488fce574aa3d3308ec38681bc9ff0de218434659480f722734e8cfe961c789a580ebfb5e0a", 0xf5, 0x6}, {&(0x7f0000000400)="272aa00af06091b06c6d64cd4d2f408ba4e5641dc5a7911c7ab701e0b2b9915229fcca4c6ac154fe4e625cc1dc245c4f2392bc90a8b03b63755374c1e613939d400afc5dd670a95d3afab50b70d217034df9036495f23aade532b6bc1a97f0364f97ca2f8c514e74775576146e1dac1fccb03877961fba84eb30fc4372b556ff7f891480bc6cf70c40bcbaaf717a898975c78ef1a91c93e72c28b1f379e4654c1554de9fea30ed0571291370014b6c0bfe42e5154ddbe52e3c5ee76b11d47c4eed41e95b45082f0eb580", 0xca, 0xb134}, {&(0x7f0000000500)="cc3774c63ca8faf3de95e2645d884b66e962b8aab4c9603ce77891c1cea8f638cd58047696f1b628c5d8a4db77aac384fc47dd5ff2f2ee964d3f", 0x3a, 0x4000}], 0x2000040, &(0x7f0000000600)={[{@map_off}, {@cruft}, {@hide}], [{@subj_type={'subj_type', 0x3d, '\x95(.([\'&)}-'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]})
utimensat(r0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0)
execveat(r0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000740)=[&(0x7f0000000700)='map=off'], &(0x7f0000000800)=[&(0x7f0000000780)='\x00', &(0x7f00000007c0)='subj_type'], 0x800)
rmdir(&(0x7f0000000840)='./file0\x00')
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
fchmodat(r1, &(0x7f00000008c0)='./file0\x00', 0x22)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0xc80000, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000940)='ro\x00', 0x0, 0x0)
vmsplice(r1, &(0x7f00000009c0)=[{&(0x7f0000000980)="108de188f26faf5f6cfb7578b679e26408163d91443b00183a4f309ea04e2ec7296ac74afec0", 0x26}], 0x1, 0x6)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
r3 = fcntl$dupfd(r2, 0x406, r1)
sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x120, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff6f8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4081}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x6)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r3)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r5, 0x672d5692c634c87, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x1)
perf_event_open(&(0x7f0000000d80)={0x3, 0x80, 0x0, 0x9, 0x81, 0x2, 0x0, 0x7, 0x2000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5db0173b, 0x4, @perf_bp={&(0x7f0000000d40), 0xa}, 0x242, 0x7ff, 0x400, 0x4, 0x4, 0x40, 0x9, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffffffffffff, 0xf, r1, 0xa)
syz_open_dev$sg(&(0x7f0000000e00), 0x101, 0x80502)
fchmodat(r2, &(0x7f0000000e40)='./file0\x00', 0x8)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000ec0)={'\x00', 0x4, 0x4, 0x7, 0xe394, 0x8})

10:53:00 executing program 5:
rt_sigtimedwait(&(0x7f0000000000)={[0x3]}, &(0x7f0000000040), &(0x7f00000000c0)={0x77359400}, 0x8)
r0 = dup(0xffffffffffffffff)
epoll_pwait2(r0, &(0x7f0000000100)=[{}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0xe4]}, 0x8)
clock_gettime(0x1, &(0x7f00000001c0))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x1, 0xd7})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r1, &(0x7f0000000240)=0x80, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x0, 0x800}, 0x81)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x111202, 0x0)
ioctl$KDSETLED(r3, 0x4b32, 0x8fd8)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r4=>r2, {0x5}}, './file0\x00'})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x280000, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x7, 0x7, {0x0, r4}, 0x401, 0x4, 0x1, {0x0, 0x0, r5}}, 0x585c)
r6 = mq_open(&(0x7f0000000440)='\x00', 0x2, 0x4, &(0x7f0000000480)={0x4, 0x6, 0x401, 0x9})
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f00000004c0))
sendfile(r1, r0, &(0x7f0000000540), 0xffff)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x58}}, 0x88c5)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000006c0)={<r8=>0x0, "6048064e5898f559c7ff98ecfba17d56"})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f00000016c0)={{r7}, 0x0, 0x2, @unused=[0x1f, 0x3ab, 0x93, 0xfff], @devid=r8})
pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000a, 0xffffffffffffffff)

10:53:00 executing program 6:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0xa20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x72}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x9}}, './file0\x00'})
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3c1c4974376ec457}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x440, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4fb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c63}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffcc4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc6, 0x3, "b128114ea73b8867ce433e2218bcd6bba6847f38f173d7da717f26a5405bcabc50c2a094d7391799906c04fac6eaa46c74be190e1285bc62e9d893c1eb9c41f87d1073ffd82a97717116ed335fd58414e06b361cd6d2126244c419d86bf2fdac4655ad82511d7d53df101c816039d3599e293fe502a6418d4551647af59a144c0fc560f3e1dc8d31821c0af192c2cee0dad2756db01696649383bfb3ce9004283e8c3e9b885c38d42d247b7be8e4ee4e55186ffd79cd4628b2e7f01b623d5bce37ae"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a16d8efb9bc016d16b6712a4048928c7829623178b937f71fc9be9f82d648956cafa0f85"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "ac2d5a9a28cb6456b905b1fb7647ee2bd99e50e07ccb48103e3403f3f4be"}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62a7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe87d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8d0}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x440}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000)
open_by_handle_at(r0, &(0x7f0000000700)=@orangefs={0x14, 0x1, {"9ca15a404a65650f109995282bb6817c", 0x3f}}, 0x111240)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40411}, 0x20000080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)=""/49, 0x31}], 0x1}, 0x20000060)
pipe2(&(0x7f0000000940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$binfmt_aout(r7, &(0x7f0000000980)={{0x107, 0x0, 0x81, 0x1a4, 0x254, 0x0, 0xf5, 0x2}, "6fa10f75c293b64968ae144534348500c2436b1ffd41e2bcd8bd9fd0fd707d946d17db2bf286cc46f9fead3f2d93522b7213b20c90359e5f125ab7c699a1df4d659bd2bf76f0fc9ea8caa34a1106df11a54781718a2db7d4d263345ad8a44a71bba828fb35a4e1f9e6522df44d5952afa81983198c96fe18ed93723f35d5a64ea5034ff86058b1f656ae857ec8785b51b110e2c238038dd255eb47721ece4e16481320e590f59ea604ac11f2b5136ec8d0838cbbb15fbf44aef48e9f415a172c53b58455d920b8c527311219b19b576ca677cfbf577961b00bfc0dfcd44b364d63345a3c4ac4", ['\x00']}, 0x206)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000bc0)={0x4, 0x6, 0x400, 0x0, 0x12})
r8 = dup(r2)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
mknod(&(0x7f0000000dc0)='./file0\x00', 0x80, 0x3)
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0x100, r6, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x62}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0xcf, 0xc5, "b12ba54e25566c0c2a37fdafb0f29fc89ca3a29151cd32a1d6825ac66d7665f22b87681bd9f093069977e1035293fea96d27c26c24af3bf998a551d50ab4a85132bff2ad4b6b15dcdc8cd02ef1266f3a516522cfff0b8da6edac3811adfa8c9a42cac0724eda63a2f8259be5844ce19806dc9d311c80f50a574079e1c0cc561e85fa821845375ccf13ee4b6ad6dd2b0b8b8fd1e00df39118352695ae275d25e24099f11a0eaed4ef649aa8d40911137fabff2253106e9881b42194e7b3b1d2439bd08e7e1466c0a37b68a6"}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

[   70.064066] audit: type=1400 audit(1664016780.881:6): avc:  denied  { execmem } for  pid=283 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
10:53:00 executing program 7:
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xcc, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0xcc}}, 0xc000)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xac, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x24008050)
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', <r1=>0x0, 0x4, 0xce, 0x9, 0x9, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x10, 0x8000, 0x100, 0x800}})
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040841}, 0x20000000)
r2 = open(&(0x7f0000000580)='./file0\x00', 0xa0000, 0x26)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r4, 0x8004f50e, &(0x7f0000000740))
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x600, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xd08e}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x3, 0x1f]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xec8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000008c0)={'ip6gre0\x00', <r6=>r1, 0x4, 0x40, 0x1, 0x9, 0x18, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7, 0x2, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', <r7=>r6, 0x29, 0x6, 0x5, 0x4291, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x8000, 0x40, 0x8, 0x3}})
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_FLOW={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000b40)={0x0, @rand_addr, @loopback}, &(0x7f0000000b80)=0xc)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'ip6tnl0\x00', r6, 0x29, 0x1, 0x7, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7, 0x80, 0x3, 0x1ff}})
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000c80), 0x8000, 0x0)
sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x6093e4bb4456d8b3}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d00)={0x16c, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x140, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x100000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1c000000}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80800000}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x427}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffb}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000080)

[   71.412307] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   71.415147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   71.416759] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   71.419040] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   71.421166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   71.422502] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.424320] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   71.425909] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   71.427509] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   71.429013] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   71.430254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   71.432717] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   71.433750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   71.435056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.436183] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   71.437385] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   71.438428] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   71.439716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   71.440895] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   71.443074] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   71.447838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   71.448985] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.449978] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   71.452121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   71.453296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   71.454292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   71.459396] Bluetooth: hci3: HCI_REQ-0x0c1a
[   71.461452] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   71.462844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   71.469188] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   71.470246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   71.471229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.472606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   71.473526] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   71.477677] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   71.480816] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   71.481953] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   71.482923] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   71.484494] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   71.485484] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   71.489300] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   71.490478] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   71.491458] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.491662] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   71.492690] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   71.493369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   71.498754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   71.502637] Bluetooth: hci7: HCI_REQ-0x0c1a
[   71.506567] Bluetooth: hci5: HCI_REQ-0x0c1a
[   71.509824] Bluetooth: hci6: HCI_REQ-0x0c1a
[   71.513845] Bluetooth: hci2: HCI_REQ-0x0c1a
[   71.538409] Bluetooth: hci1: HCI_REQ-0x0c1a
[   71.538435] Bluetooth: hci4: HCI_REQ-0x0c1a
[   71.552776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   71.555131] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   71.561418] Bluetooth: hci0: HCI_REQ-0x0c1a
[   73.524994] Bluetooth: hci5: command 0x0409 tx timeout
[   73.525015] Bluetooth: hci7: command 0x0409 tx timeout
[   73.526241] Bluetooth: hci3: command 0x0409 tx timeout
[   73.589613] Bluetooth: hci1: command 0x0409 tx timeout
[   73.589725] Bluetooth: hci0: command 0x0409 tx timeout
[   73.590674] Bluetooth: hci4: command 0x0409 tx timeout
[   73.591693] Bluetooth: hci2: command 0x0409 tx timeout
[   73.592492] Bluetooth: hci6: command 0x0409 tx timeout
[   75.572763] Bluetooth: hci7: command 0x041b tx timeout
[   75.572857] Bluetooth: hci5: command 0x041b tx timeout
[   75.576333] Bluetooth: hci3: command 0x041b tx timeout
[   75.636621] Bluetooth: hci6: command 0x041b tx timeout
[   75.636761] Bluetooth: hci2: command 0x041b tx timeout
[   75.637279] Bluetooth: hci4: command 0x041b tx timeout
[   75.638475] Bluetooth: hci0: command 0x041b tx timeout
[   75.639020] Bluetooth: hci1: command 0x041b tx timeout
[   77.620762] Bluetooth: hci7: command 0x040f tx timeout
[   77.620839] Bluetooth: hci3: command 0x040f tx timeout
[   77.621523] Bluetooth: hci5: command 0x040f tx timeout
[   77.684713] Bluetooth: hci0: command 0x040f tx timeout
[   77.684833] Bluetooth: hci1: command 0x040f tx timeout
[   77.685450] Bluetooth: hci4: command 0x040f tx timeout
[   77.685909] Bluetooth: hci2: command 0x040f tx timeout
[   77.685928] Bluetooth: hci6: command 0x040f tx timeout
[   79.668645] Bluetooth: hci5: command 0x0419 tx timeout
[   79.668704] Bluetooth: hci3: command 0x0419 tx timeout
[   79.669118] Bluetooth: hci7: command 0x0419 tx timeout
[   79.732632] Bluetooth: hci6: command 0x0419 tx timeout
[   79.732684] Bluetooth: hci4: command 0x0419 tx timeout
[   79.733130] Bluetooth: hci2: command 0x0419 tx timeout
[   79.733627] Bluetooth: hci1: command 0x0419 tx timeout
[   79.733965] Bluetooth: hci0: command 0x0419 tx timeout
[  125.978341] audit: type=1400 audit(1664016836.795:7): avc:  denied  { open } for  pid=3949 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  126.408268] loop4: detected capacity change from 0 to 188
[  126.409459] =======================================================
[  126.409459] WARNING: The mand mount option has been deprecated and
[  126.409459]          and is ignored by this kernel. Remove the mand
[  126.409459]          option from the mount to silence this warning.
[  126.409459] =======================================================
[  126.412242] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  126.516655] loop4: detected capacity change from 0 to 188
[  126.518420] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
10:54:13 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0xa20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x72}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x9}}, './file0\x00'})
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3c1c4974376ec457}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x440, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4fb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c63}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffcc4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc6, 0x3, "b128114ea73b8867ce433e2218bcd6bba6847f38f173d7da717f26a5405bcabc50c2a094d7391799906c04fac6eaa46c74be190e1285bc62e9d893c1eb9c41f87d1073ffd82a97717116ed335fd58414e06b361cd6d2126244c419d86bf2fdac4655ad82511d7d53df101c816039d3599e293fe502a6418d4551647af59a144c0fc560f3e1dc8d31821c0af192c2cee0dad2756db01696649383bfb3ce9004283e8c3e9b885c38d42d247b7be8e4ee4e55186ffd79cd4628b2e7f01b623d5bce37ae"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a16d8efb9bc016d16b6712a4048928c7829623178b937f71fc9be9f82d648956cafa0f85"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "ac2d5a9a28cb6456b905b1fb7647ee2bd99e50e07ccb48103e3403f3f4be"}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62a7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe87d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8d0}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x440}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000)
open_by_handle_at(r0, &(0x7f0000000700)=@orangefs={0x14, 0x1, {"9ca15a404a65650f109995282bb6817c", 0x3f}}, 0x111240)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40411}, 0x20000080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)=""/49, 0x31}], 0x1}, 0x20000060)
pipe2(&(0x7f0000000940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$binfmt_aout(r7, &(0x7f0000000980)={{0x107, 0x0, 0x81, 0x1a4, 0x254, 0x0, 0xf5, 0x2}, "6fa10f75c293b64968ae144534348500c2436b1ffd41e2bcd8bd9fd0fd707d946d17db2bf286cc46f9fead3f2d93522b7213b20c90359e5f125ab7c699a1df4d659bd2bf76f0fc9ea8caa34a1106df11a54781718a2db7d4d263345ad8a44a71bba828fb35a4e1f9e6522df44d5952afa81983198c96fe18ed93723f35d5a64ea5034ff86058b1f656ae857ec8785b51b110e2c238038dd255eb47721ece4e16481320e590f59ea604ac11f2b5136ec8d0838cbbb15fbf44aef48e9f415a172c53b58455d920b8c527311219b19b576ca677cfbf577961b00bfc0dfcd44b364d63345a3c4ac4", ['\x00']}, 0x206)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000bc0)={0x4, 0x6, 0x400, 0x0, 0x12})
r8 = dup(r2)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
mknod(&(0x7f0000000dc0)='./file0\x00', 0x80, 0x3)
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0x100, r6, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x62}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0xcf, 0xc5, "b12ba54e25566c0c2a37fdafb0f29fc89ca3a29151cd32a1d6825ac66d7665f22b87681bd9f093069977e1035293fea96d27c26c24af3bf998a551d50ab4a85132bff2ad4b6b15dcdc8cd02ef1266f3a516522cfff0b8da6edac3811adfa8c9a42cac0724eda63a2f8259be5844ce19806dc9d311c80f50a574079e1c0cc561e85fa821845375ccf13ee4b6ad6dd2b0b8b8fd1e00df39118352695ae275d25e24099f11a0eaed4ef649aa8d40911137fabff2253106e9881b42194e7b3b1d2439bd08e7e1466c0a37b68a6"}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

10:54:13 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '/\x00'})
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f00000018c0)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000001780)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000140)=""/130, 0x82}, {0xffffffffffffffff}], 0x3, &(0x7f0000000240)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000012c0)=""/46, 0x2e}, 0x9}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001300)=""/9, 0x9}], 0x1}, 0x4fc}, {{&(0x7f0000001380)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001400)=""/21, 0x15}], 0x1, &(0x7f0000001480)}, 0x3f}, {{&(0x7f00000014c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001540)=""/30, 0x1e}, {&(0x7f0000001580)=""/150, 0x96}, {&(0x7f0000001640)=""/31, 0x1f}], 0x3, &(0x7f00000016c0)=""/157, 0x9d}, 0x410}], 0x5, 0x42, &(0x7f0000001900)={r1, r2+10000000})
futex(&(0x7f0000001940)=0x2, 0xc, 0x2, &(0x7f0000001980)={0x0, 0x3938700}, &(0x7f00000019c0)=0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001a00)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {<r4=>0xee00, 0xee01}}, './file0\x00'})
r5 = getegid()
fchown(r0, r4, r5)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001a40), 0x100, 0x0)
ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000001a80))
futex(&(0x7f0000001ac0), 0xd, 0x0, &(0x7f0000001b00), &(0x7f0000001b40)=0x1, 0x1)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000001b80), 0x8)
epoll_pwait2(r3, &(0x7f0000001bc0)=[{}, {}], 0x2, &(0x7f0000001c00), &(0x7f0000001c40)={[0xfff]}, 0x8)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611)
openat$nvram(0xffffffffffffff9c, &(0x7f0000001cc0), 0x40000, 0x0)

10:54:13 executing program 6:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0xa20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x72}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x9}}, './file0\x00'})
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3c1c4974376ec457}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x440, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4fb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c63}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffcc4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc6, 0x3, "b128114ea73b8867ce433e2218bcd6bba6847f38f173d7da717f26a5405bcabc50c2a094d7391799906c04fac6eaa46c74be190e1285bc62e9d893c1eb9c41f87d1073ffd82a97717116ed335fd58414e06b361cd6d2126244c419d86bf2fdac4655ad82511d7d53df101c816039d3599e293fe502a6418d4551647af59a144c0fc560f3e1dc8d31821c0af192c2cee0dad2756db01696649383bfb3ce9004283e8c3e9b885c38d42d247b7be8e4ee4e55186ffd79cd4628b2e7f01b623d5bce37ae"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a16d8efb9bc016d16b6712a4048928c7829623178b937f71fc9be9f82d648956cafa0f85"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "ac2d5a9a28cb6456b905b1fb7647ee2bd99e50e07ccb48103e3403f3f4be"}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62a7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe87d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8d0}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x440}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000)
open_by_handle_at(r0, &(0x7f0000000700)=@orangefs={0x14, 0x1, {"9ca15a404a65650f109995282bb6817c", 0x3f}}, 0x111240)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40411}, 0x20000080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)=""/49, 0x31}], 0x1}, 0x20000060)
pipe2(&(0x7f0000000940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$binfmt_aout(r7, &(0x7f0000000980)={{0x107, 0x0, 0x81, 0x1a4, 0x254, 0x0, 0xf5, 0x2}, "6fa10f75c293b64968ae144534348500c2436b1ffd41e2bcd8bd9fd0fd707d946d17db2bf286cc46f9fead3f2d93522b7213b20c90359e5f125ab7c699a1df4d659bd2bf76f0fc9ea8caa34a1106df11a54781718a2db7d4d263345ad8a44a71bba828fb35a4e1f9e6522df44d5952afa81983198c96fe18ed93723f35d5a64ea5034ff86058b1f656ae857ec8785b51b110e2c238038dd255eb47721ece4e16481320e590f59ea604ac11f2b5136ec8d0838cbbb15fbf44aef48e9f415a172c53b58455d920b8c527311219b19b576ca677cfbf577961b00bfc0dfcd44b364d63345a3c4ac4", ['\x00']}, 0x206)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000bc0)={0x4, 0x6, 0x400, 0x0, 0x12})
r8 = dup(r2)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
mknod(&(0x7f0000000dc0)='./file0\x00', 0x80, 0x3)
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0x100, r6, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x62}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0xcf, 0xc5, "b12ba54e25566c0c2a37fdafb0f29fc89ca3a29151cd32a1d6825ac66d7665f22b87681bd9f093069977e1035293fea96d27c26c24af3bf998a551d50ab4a85132bff2ad4b6b15dcdc8cd02ef1266f3a516522cfff0b8da6edac3811adfa8c9a42cac0724eda63a2f8259be5844ce19806dc9d311c80f50a574079e1c0cc561e85fa821845375ccf13ee4b6ad6dd2b0b8b8fd1e00df39118352695ae275d25e24099f11a0eaed4ef649aa8d40911137fabff2253106e9881b42194e7b3b1d2439bd08e7e1466c0a37b68a6"}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

10:54:13 executing program 2:
mknod$loop(&(0x7f0000000880)='./file0\x00', 0x6000, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000740)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='trusted.overlay.nlink\x00'], &(0x7f0000000400)=[&(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)='-&]\xff@\'\x00', &(0x7f0000000200)='.(--)@*\x00', &(0x7f0000000240)=']\\!-(\x00', &(0x7f0000000280)='!\xd7$\x00', &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)=').\'(*\x00', &(0x7f00000003c0)='trusted.overlay.nlink\x00'])
r0 = epoll_create(0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20002006})
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)={0x11})
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
lremovexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@known='trusted.overlay.upper\x00')

10:54:13 executing program 7:
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0xfffd, 0x0, 0x8})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080))
write(r0, &(0x7f0000000000)="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", 0xfa)
stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000240)={0x1b4, 0x8, &(0x7f0000000300)="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"})
setresuid(0x0, r1, 0x0)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0/file0\x00')
unlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0)

10:54:13 executing program 5:
mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x94, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x65}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x38, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7f396d2cefdce0eccfce37a560"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a18efd8c4a29f032414f118a1b"}]}, 0x94}}, 0x4000000)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b53700000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0035010000000000004000"], 0x28}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5b}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x48000)

10:54:13 executing program 0:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000))
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
setns(r0, 0x0)
fcntl$getflags(r0, 0x401)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, <r2=>0x0}})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={r2, "95f6c04c59ba89fade30da277727ca8e"})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = dup(r4)
ioctl$VT_DISALLOCATE(r5, 0x5608)
bind$inet(r5, &(0x7f00000014c0)={0x2, 0x4e21, @remote}, 0x10)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001600)=<r6=>0x0)
perf_event_open(&(0x7f0000001580)={0x4, 0x80, 0x9, 0x81, 0x7, 0x9a, 0x0, 0x9, 0x40004, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000001540), 0x2}, 0x109c1, 0x9, 0x7, 0x4, 0x401, 0x8, 0x1fc, 0x0, 0x7, 0x0, 0xffffffff80000000}, r6, 0xc, r5, 0x8)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000001640))
perf_event_open(&(0x7f0000001680)={0x5, 0x80, 0xa9, 0x0, 0x81, 0x2, 0x0, 0x312, 0x4002, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x177, 0x80}, 0x5420, 0xffffffffffff0906, 0x3ca, 0x9, 0x1000, 0x100, 0x3, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x3, r5, 0x9)
ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000001700)={0x8, 0x8, 0x1, 0x401, 0x6})
fcntl$setstatus(r4, 0x4, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x3c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44081}, 0x4004052)

10:54:13 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x1000, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2282, 0x0)

[  142.889046] audit: type=1400 audit(1664016853.705:8): avc:  denied  { block_suspend } for  pid=3985 comm="syz-executor.2" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
[  142.927893] netlink: 'syz-executor.5': attribute type 309 has an invalid length.
10:54:13 executing program 6:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16=r1, @ANYRES64, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="b984f8e37db319edee33e7b24241e050bf5ab2d34696d6cec938219ad27cf8631e5f802730d33d8862477a0023c8378461926538d3f4023819c7dcc8f32710737e39895cf4656f2278ebda1130d61032dc60c4e4890b804272f9a091ca200089e10880e4e18d8ae51cbc38312c9b7307a3bc1117c8e71b7b90b2ee7c2bd2a5bb48ba0857ea894c4373d32501c9f4f675a4b8ce0fe0f6b4c4c9069176765682e922c4444f6128e2aaf937554aefce153bac1949743c73eaec2f01bfffd0170a9f7a08b7196783c37a9d7ef9646d6a5770acb16d5e3f6cece4b52efba74bd5da09ccdbc0048f17d033ab38733599"], 0x2c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r3, @ANYRES16, @ANYRES32=r2], 0x2c}}, 0x4004000)
sync_file_range(r2, 0x80000001, 0x7fff, 0x4)
syz_genetlink_get_family_id$team(&(0x7f0000000640), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x400200, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x40, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4011)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4], 0x2c}}, 0x0)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="a4001100", @ANYRES16=0x0, @ANYBLOB="00082abd7000fbdbdf25080000001c000280080001000900000008000200b12c0000080001003f000000540004801300010062726f6164636173742d6c696e6b00003c0007800800020002000000080001000f00000008000100080000000800010003000000080001001000000008000300000800000800040009000000"], 0x84}, 0x1, 0x0, 0x0, 0x20000840}, 0x30048050)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="651ed34b4b8d082d97af8eecede0dc9fcab6083453c86e18915892f1ee96e4920bc020deec07a038ac20d2ce48b7906606fb9b1630691cada77bc5f934bc4703b5a7a8734d8f54d7103b5e6341afccb0980fab4870c99b51e9d755dd8cdfa96e7ed73cfe22ac25523e771037781470d0fe3ead90898455f40aa3ea90e40f0d12318e233c02bd76fe6f5ec73b065e0cbd2cbb1dc2af49080b290104469bff190b1e40c1e7f959283de160a7bb78c0b02c2de551d6", 0xb4}], 0x1, 0x8a, 0x10000)

[  142.959256] netlink: 'syz-executor.5': attribute type 309 has an invalid length.
10:54:13 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '/\x00'})
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f00000018c0)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000001780)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000140)=""/130, 0x82}, {0xffffffffffffffff}], 0x3, &(0x7f0000000240)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000012c0)=""/46, 0x2e}, 0x9}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001300)=""/9, 0x9}], 0x1}, 0x4fc}, {{&(0x7f0000001380)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001400)=""/21, 0x15}], 0x1, &(0x7f0000001480)}, 0x3f}, {{&(0x7f00000014c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001540)=""/30, 0x1e}, {&(0x7f0000001580)=""/150, 0x96}, {&(0x7f0000001640)=""/31, 0x1f}], 0x3, &(0x7f00000016c0)=""/157, 0x9d}, 0x410}], 0x5, 0x42, &(0x7f0000001900)={r1, r2+10000000})
futex(&(0x7f0000001940)=0x2, 0xc, 0x2, &(0x7f0000001980)={0x0, 0x3938700}, &(0x7f00000019c0)=0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001a00)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {<r4=>0xee00, 0xee01}}, './file0\x00'})
r5 = getegid()
fchown(r0, r4, r5)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001a40), 0x100, 0x0)
ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000001a80))
futex(&(0x7f0000001ac0), 0xd, 0x0, &(0x7f0000001b00), &(0x7f0000001b40)=0x1, 0x1)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000001b80), 0x8)
epoll_pwait2(r3, &(0x7f0000001bc0)=[{}, {}], 0x2, &(0x7f0000001c00), &(0x7f0000001c40)={[0xfff]}, 0x8)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611)
openat$nvram(0xffffffffffffff9c, &(0x7f0000001cc0), 0x40000, 0x0)

10:54:13 executing program 0:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000))
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
setns(r0, 0x0)
fcntl$getflags(r0, 0x401)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, <r2=>0x0}})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={r2, "95f6c04c59ba89fade30da277727ca8e"})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = dup(r4)
ioctl$VT_DISALLOCATE(r5, 0x5608)
bind$inet(r5, &(0x7f00000014c0)={0x2, 0x4e21, @remote}, 0x10)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001600)=<r6=>0x0)
perf_event_open(&(0x7f0000001580)={0x4, 0x80, 0x9, 0x81, 0x7, 0x9a, 0x0, 0x9, 0x40004, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000001540), 0x2}, 0x109c1, 0x9, 0x7, 0x4, 0x401, 0x8, 0x1fc, 0x0, 0x7, 0x0, 0xffffffff80000000}, r6, 0xc, r5, 0x8)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000001640))
perf_event_open(&(0x7f0000001680)={0x5, 0x80, 0xa9, 0x0, 0x81, 0x2, 0x0, 0x312, 0x4002, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x177, 0x80}, 0x5420, 0xffffffffffff0906, 0x3ca, 0x9, 0x1000, 0x100, 0x3, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x3, r5, 0x9)
ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000001700)={0x8, 0x8, 0x1, 0x401, 0x6})
fcntl$setstatus(r4, 0x4, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x3c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44081}, 0x4004052)

10:54:13 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0xa20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x72}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x9}}, './file0\x00'})
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3c1c4974376ec457}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x440, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4fb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c63}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffcc4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc6, 0x3, "b128114ea73b8867ce433e2218bcd6bba6847f38f173d7da717f26a5405bcabc50c2a094d7391799906c04fac6eaa46c74be190e1285bc62e9d893c1eb9c41f87d1073ffd82a97717116ed335fd58414e06b361cd6d2126244c419d86bf2fdac4655ad82511d7d53df101c816039d3599e293fe502a6418d4551647af59a144c0fc560f3e1dc8d31821c0af192c2cee0dad2756db01696649383bfb3ce9004283e8c3e9b885c38d42d247b7be8e4ee4e55186ffd79cd4628b2e7f01b623d5bce37ae"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a16d8efb9bc016d16b6712a4048928c7829623178b937f71fc9be9f82d648956cafa0f85"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "ac2d5a9a28cb6456b905b1fb7647ee2bd99e50e07ccb48103e3403f3f4be"}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62a7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe87d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8d0}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x440}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000)
open_by_handle_at(r0, &(0x7f0000000700)=@orangefs={0x14, 0x1, {"9ca15a404a65650f109995282bb6817c", 0x3f}}, 0x111240)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40411}, 0x20000080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)=""/49, 0x31}], 0x1}, 0x20000060)
pipe2(&(0x7f0000000940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$binfmt_aout(r7, &(0x7f0000000980)={{0x107, 0x0, 0x81, 0x1a4, 0x254, 0x0, 0xf5, 0x2}, "6fa10f75c293b64968ae144534348500c2436b1ffd41e2bcd8bd9fd0fd707d946d17db2bf286cc46f9fead3f2d93522b7213b20c90359e5f125ab7c699a1df4d659bd2bf76f0fc9ea8caa34a1106df11a54781718a2db7d4d263345ad8a44a71bba828fb35a4e1f9e6522df44d5952afa81983198c96fe18ed93723f35d5a64ea5034ff86058b1f656ae857ec8785b51b110e2c238038dd255eb47721ece4e16481320e590f59ea604ac11f2b5136ec8d0838cbbb15fbf44aef48e9f415a172c53b58455d920b8c527311219b19b576ca677cfbf577961b00bfc0dfcd44b364d63345a3c4ac4", ['\x00']}, 0x206)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000bc0)={0x4, 0x6, 0x400, 0x0, 0x12})
r8 = dup(r2)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
mknod(&(0x7f0000000dc0)='./file0\x00', 0x80, 0x3)
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0x100, r6, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x62}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0xcf, 0xc5, "b12ba54e25566c0c2a37fdafb0f29fc89ca3a29151cd32a1d6825ac66d7665f22b87681bd9f093069977e1035293fea96d27c26c24af3bf998a551d50ab4a85132bff2ad4b6b15dcdc8cd02ef1266f3a516522cfff0b8da6edac3811adfa8c9a42cac0724eda63a2f8259be5844ce19806dc9d311c80f50a574079e1c0cc561e85fa821845375ccf13ee4b6ad6dd2b0b8b8fd1e00df39118352695ae275d25e24099f11a0eaed4ef649aa8d40911137fabff2253106e9881b42194e7b3b1d2439bd08e7e1466c0a37b68a6"}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

10:54:13 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clone3(&(0x7f00000003c0)={0x10000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x6}, &(0x7f0000000300)=""/70, 0x46, &(0x7f00000006c0)=""/4096, &(0x7f0000000380)=[r2, r2, r2, r2, r2], 0x5}, 0x58)
syz_open_procfs(r2, &(0x7f0000000080)='setgroups\x00')

10:54:13 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0xdc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4c8}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}}}}]}, @CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x131001, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20010800}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0)
getdents64(r4, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20008088}, 0x8000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10, 0xffffffffffffffff, 0x21976000)
pivot_root(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file1\x00')
sendfile(r1, r4, &(0x7f0000000080)=0x1000, 0x1f00)
openat(r2, &(0x7f0000000400)='./file1\x00', 0x40, 0x40)
pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000)

10:54:13 executing program 3:
mknod(&(0x7f0000008d80)='./file0\x00', 0x1000, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2282, 0x0)

10:54:13 executing program 2:
mknod$loop(&(0x7f0000000880)='./file0\x00', 0x6000, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000740)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='trusted.overlay.nlink\x00'], &(0x7f0000000400)=[&(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)='-&]\xff@\'\x00', &(0x7f0000000200)='.(--)@*\x00', &(0x7f0000000240)=']\\!-(\x00', &(0x7f0000000280)='!\xd7$\x00', &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)=').\'(*\x00', &(0x7f00000003c0)='trusted.overlay.nlink\x00'])
r0 = epoll_create(0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20002006})
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)={0x11})
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
lremovexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@known='trusted.overlay.upper\x00')

[  143.186138] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'.
[  143.262406] audit: type=1400 audit(1664016854.079:9): avc:  denied  { kernel } for  pid=4013 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[  143.273537] hrtimer: interrupt took 39444 ns
[  143.279197] ------------[ cut here ]------------
[  143.279229] 
[  143.279234] ======================================================
[  143.279240] WARNING: possible circular locking dependency detected
[  143.279246] 6.0.0-rc6-next-20220923 #1 Not tainted
[  143.279258] ------------------------------------------------------
[  143.279264] syz-executor.7/4019 is trying to acquire lock:
[  143.279275] ffffffff853faaf8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0xe/0x70
[  143.279339] 
[  143.279339] but task is already holding lock:
[  143.279343] ffff88800ddfa820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  143.279393] 
[  143.279393] which lock already depends on the new lock.
[  143.279393] 
[  143.279398] 
[  143.279398] the existing dependency chain (in reverse order) is:
[  143.279403] 
[  143.279403] -> #3 (&ctx->lock){....}-{2:2}:
[  143.279429]        _raw_spin_lock+0x2a/0x40
[  143.279463]        __perf_event_task_sched_out+0x53b/0x18d0
[  143.279486]        __schedule+0xedd/0x2470
[  143.279510]        schedule+0xda/0x1b0
[  143.279534]        exit_to_user_mode_prepare+0x114/0x1a0
[  143.279554]        syscall_exit_to_user_mode+0x19/0x40
[  143.279576]        do_syscall_64+0x48/0x90
[  143.279606]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  143.279629] 
[  143.279629] -> #2 (&rq->__lock){-.-.}-{2:2}:
[  143.279653]        _raw_spin_lock_nested+0x30/0x40
[  143.279686]        raw_spin_rq_lock_nested+0x1e/0x30
[  143.279709]        task_fork_fair+0x63/0x4d0
[  143.279739]        sched_cgroup_fork+0x3d0/0x540
[  143.279764]        copy_process+0x4183/0x6e20
[  143.279783]        kernel_clone+0xe7/0x890
[  143.279800]        user_mode_thread+0xad/0xf0
[  143.279818]        rest_init+0x24/0x250
[  143.279839]        arch_call_rest_init+0xf/0x14
[  143.279869]        start_kernel+0x4c1/0x4e6
[  143.279897]        secondary_startup_64_no_verify+0xe0/0xeb
[  143.279922] 
[  143.279922] -> #1 (&p->pi_lock){-.-.}-{2:2}:
[  143.279946]        _raw_spin_lock_irqsave+0x39/0x60
[  143.279980]        try_to_wake_up+0xab/0x1930
[  143.280003]        up+0x75/0xb0
[  143.280028]        __up_console_sem+0x6e/0x80
[  143.280056]        console_unlock+0x46a/0x590
[  143.280084]        do_con_write+0xc05/0x1d50
[  143.280105]        con_write+0x21/0x40
[  143.280124]        n_tty_write+0x4d4/0xfe0
[  143.280147]        file_tty_write.constprop.0+0x49c/0x8f0
[  143.280170]        vfs_write+0x9c3/0xd90
[  143.280202]        ksys_write+0x127/0x250
[  143.280233]        do_syscall_64+0x3b/0x90
[  143.280262]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  143.280284] 
[  143.280284] -> #0 ((console_sem).lock){-...}-{2:2}:
[  143.280309]        __lock_acquire+0x2a02/0x5e70
[  143.280339]        lock_acquire+0x1a2/0x530
[  143.280368]        _raw_spin_lock_irqsave+0x39/0x60
[  143.280401]        down_trylock+0xe/0x70
[  143.280427]        __down_trylock_console_sem+0x3b/0xd0
[  143.280456]        vprintk_emit+0x16b/0x560
[  143.280485]        vprintk+0x84/0xa0
[  143.280514]        _printk+0xba/0xf1
[  143.280533]        report_bug.cold+0x72/0xab
[  143.280561]        handle_bug+0x3c/0x70
[  143.280590]        exc_invalid_op+0x14/0x50
[  143.280620]        asm_exc_invalid_op+0x16/0x20
[  143.280641]        group_sched_out.part.0+0x2c7/0x460
[  143.280661]        ctx_sched_out+0x8f1/0xc10
[  143.280679]        __perf_event_task_sched_out+0x6d0/0x18d0
[  143.280702]        __schedule+0xedd/0x2470
[  143.280726]        schedule+0xda/0x1b0
[  143.280749]        exit_to_user_mode_prepare+0x114/0x1a0
[  143.280768]        syscall_exit_to_user_mode+0x19/0x40
[  143.280790]        do_syscall_64+0x48/0x90
[  143.280820]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  143.280842] 
[  143.280842] other info that might help us debug this:
[  143.280842] 
[  143.280847] Chain exists of:
[  143.280847]   (console_sem).lock --> &rq->__lock --> &ctx->lock
[  143.280847] 
[  143.280874]  Possible unsafe locking scenario:
[  143.280874] 
[  143.280878]        CPU0                    CPU1
[  143.280882]        ----                    ----
[  143.280886]   lock(&ctx->lock);
[  143.280896]                                lock(&rq->__lock);
[  143.280907]                                lock(&ctx->lock);
[  143.280919]   lock((console_sem).lock);
[  143.280929] 
[  143.280929]  *** DEADLOCK ***
[  143.280929] 
[  143.280933] 2 locks held by syz-executor.7/4019:
[  143.280945]  #0: ffff88806ce37d18 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470
[  143.281006]  #1: ffff88800ddfa820 (&ctx->lock){....}-{2:2}, at: __perf_event_task_sched_out+0x53b/0x18d0
[  143.281056] 
[  143.281056] stack backtrace:
[  143.281061] CPU: 0 PID: 4019 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220923 #1
[  143.281083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  143.281098] Call Trace:
[  143.281103]  <TASK>
[  143.281110]  dump_stack_lvl+0x8b/0xb3
[  143.281142]  check_noncircular+0x263/0x2e0
[  143.281172]  ? format_decode+0x26c/0xb50
[  143.281201]  ? print_circular_bug+0x450/0x450
[  143.281232]  ? enable_ptr_key_workfn+0x20/0x20
[  143.281259]  ? __lockdep_reset_lock+0x180/0x180
[  143.281290]  ? format_decode+0x26c/0xb50
[  143.281321]  ? alloc_chain_hlocks+0x1ec/0x5a0
[  143.281353]  __lock_acquire+0x2a02/0x5e70
[  143.281392]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  143.281432]  lock_acquire+0x1a2/0x530
[  143.281463]  ? down_trylock+0xe/0x70
[  143.281493]  ? lock_release+0x750/0x750
[  143.281530]  ? vprintk+0x84/0xa0
[  143.281562]  _raw_spin_lock_irqsave+0x39/0x60
[  143.281597]  ? down_trylock+0xe/0x70
[  143.281626]  down_trylock+0xe/0x70
[  143.281654]  ? vprintk+0x84/0xa0
[  143.281684]  __down_trylock_console_sem+0x3b/0xd0
[  143.281716]  vprintk_emit+0x16b/0x560
[  143.281750]  vprintk+0x84/0xa0
[  143.281781]  _printk+0xba/0xf1
[  143.281802]  ? record_print_text.cold+0x16/0x16
[  143.281827]  ? hrtimer_try_to_cancel+0x163/0x2c0
[  143.281851]  ? lock_downgrade+0x6d0/0x6d0
[  143.281883]  ? report_bug.cold+0x66/0xab
[  143.281915]  ? group_sched_out.part.0+0x2c7/0x460
[  143.281937]  report_bug.cold+0x72/0xab
[  143.281970]  handle_bug+0x3c/0x70
[  143.282001]  exc_invalid_op+0x14/0x50
[  143.282034]  asm_exc_invalid_op+0x16/0x20
[  143.282056] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  143.282081] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  143.282101] RSP: 0018:ffff888041f9fc48 EFLAGS: 00010006
[  143.282118] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  143.282131] RDX: ffff888041f73580 RSI: ffffffff81564fb7 RDI: 0000000000000005
[  143.282145] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001
[  143.282159] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800ddfa800
[  143.282172] R13: ffff88806ce3d140 R14: ffffffff8547d1a0 R15: 0000000000000002
[  143.282192]  ? group_sched_out.part.0+0x2c7/0x460
[  143.282216]  ? group_sched_out.part.0+0x2c7/0x460
[  143.282241]  ctx_sched_out+0x8f1/0xc10
[  143.282264]  __perf_event_task_sched_out+0x6d0/0x18d0
[  143.282293]  ? lock_is_held_type+0xd7/0x130
[  143.282317]  ? __perf_cgroup_move+0x160/0x160
[  143.282340]  ? set_next_entity+0x304/0x550
[  143.282371]  ? update_curr+0x267/0x740
[  143.282405]  ? lock_is_held_type+0xd7/0x130
[  143.282430]  __schedule+0xedd/0x2470
[  143.282460]  ? io_schedule_timeout+0x150/0x150
[  143.282490]  ? __x64_sys_futex_time32+0x480/0x480
[  143.282514]  schedule+0xda/0x1b0
[  143.282541]  exit_to_user_mode_prepare+0x114/0x1a0
[  143.282563]  syscall_exit_to_user_mode+0x19/0x40
[  143.282587]  do_syscall_64+0x48/0x90
[  143.282619]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  143.282643] RIP: 0033:0x7fa5310f9b19
[  143.282658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  143.282678] RSP: 002b:00007fa52e66f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  143.282698] RAX: 0000000000000001 RBX: 00007fa53120cf68 RCX: 00007fa5310f9b19
[  143.282712] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa53120cf6c
[  143.282725] RBP: 00007fa53120cf60 R08: 000000000000000e R09: 0000000000000000
[  143.282738] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fa53120cf6c
[  143.282751] R13: 00007fffe6ef270f R14: 00007fa52e66f300 R15: 0000000000022000
[  143.282775]  </TASK>
[  143.387657] WARNING: CPU: 0 PID: 4019 at kernel/events/core.c:2309 group_sched_out.part.0+0x2c7/0x460
[  143.388792] Modules linked in:
[  143.389217] CPU: 0 PID: 4019 Comm: syz-executor.7 Not tainted 6.0.0-rc6-next-20220923 #1
[  143.390289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014
[  143.391846] RIP: 0010:group_sched_out.part.0+0x2c7/0x460
[  143.392605] Code: 5e 41 5f e9 5b bb ef ff e8 56 bb ef ff 65 8b 1d 1b 26 ac 7e 31 ff 89 de e8 f6 b7 ef ff 85 db 0f 84 8a 00 00 00 e8 39 bb ef ff <0f> 0b e9 a5 fe ff ff e8 2d bb ef ff 48 8d 7d 10 48 b8 00 00 00 00
[  143.395130] RSP: 0018:ffff888041f9fc48 EFLAGS: 00010006
[  143.395861] RAX: 0000000040000002 RBX: 0000000000000000 RCX: 0000000000000000
[  143.396832] RDX: ffff888041f73580 RSI: ffffffff81564fb7 RDI: 0000000000000005
[  143.397848] RBP: ffff888008668000 R08: 0000000000000005 R09: 0000000000000001
[  143.398833] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800ddfa800
[  143.399834] R13: ffff88806ce3d140 R14: ffffffff8547d1a0 R15: 0000000000000002
[  143.400812] FS:  00007fa52e66f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  143.401939] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  143.402747] CR2: 00007f7204819368 CR3: 000000001767e000 CR4: 0000000000350ef0
[  143.403736] Call Trace:
[  143.404098]  <TASK>
[  143.404425]  ctx_sched_out+0x8f1/0xc10
[  143.404993]  __perf_event_task_sched_out+0x6d0/0x18d0
[  143.405718]  ? lock_is_held_type+0xd7/0x130
[  143.406329]  ? __perf_cgroup_move+0x160/0x160
[  143.406968]  ? set_next_entity+0x304/0x550
[  143.407574]  ? update_curr+0x267/0x740
[  143.408136]  ? lock_is_held_type+0xd7/0x130
[  143.408754]  __schedule+0xedd/0x2470
[  143.409310]  ? io_schedule_timeout+0x150/0x150
[  143.409969]  ? __x64_sys_futex_time32+0x480/0x480
[  143.410656]  schedule+0xda/0x1b0
[  143.411140]  exit_to_user_mode_prepare+0x114/0x1a0
[  143.411825]  syscall_exit_to_user_mode+0x19/0x40
[  143.412480]  do_syscall_64+0x48/0x90
[  143.413052]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  143.413759] RIP: 0033:0x7fa5310f9b19
[  143.414252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  143.416567] RSP: 002b:00007fa52e66f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  143.417547] RAX: 0000000000000001 RBX: 00007fa53120cf68 RCX: 00007fa5310f9b19
[  143.418470] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa53120cf6c
[  143.419386] RBP: 00007fa53120cf60 R08: 000000000000000e R09: 0000000000000000
[  143.420307] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fa53120cf6c
[  143.421249] R13: 00007fffe6ef270f R14: 00007fa52e66f300 R15: 0000000000022000
[  143.422196]  </TASK>
[  143.422523] irq event stamp: 1762
[  143.422980] hardirqs last  enabled at (1761): [<ffffffff8133e999>] exit_to_user_mode_prepare+0x109/0x1a0
[  143.424218] hardirqs last disabled at (1762): [<ffffffff84259645>] __schedule+0x1225/0x2470
[  143.425324] softirqs last  enabled at (1756): [<ffffffff8116fa8b>] __irq_exit_rcu+0x11b/0x180
[  143.426475] softirqs last disabled at (1309): [<ffffffff8116fa8b>] __irq_exit_rcu+0x11b/0x180
[  143.427601] ---[ end trace 0000000000000000 ]---
10:54:14 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0xa20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x72}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x9}}, './file0\x00'})
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3c1c4974376ec457}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x440, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4fb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c63}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffcc4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc6, 0x3, "b128114ea73b8867ce433e2218bcd6bba6847f38f173d7da717f26a5405bcabc50c2a094d7391799906c04fac6eaa46c74be190e1285bc62e9d893c1eb9c41f87d1073ffd82a97717116ed335fd58414e06b361cd6d2126244c419d86bf2fdac4655ad82511d7d53df101c816039d3599e293fe502a6418d4551647af59a144c0fc560f3e1dc8d31821c0af192c2cee0dad2756db01696649383bfb3ce9004283e8c3e9b885c38d42d247b7be8e4ee4e55186ffd79cd4628b2e7f01b623d5bce37ae"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a16d8efb9bc016d16b6712a4048928c7829623178b937f71fc9be9f82d648956cafa0f85"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "ac2d5a9a28cb6456b905b1fb7647ee2bd99e50e07ccb48103e3403f3f4be"}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62a7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe87d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8d0}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x440}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000)
open_by_handle_at(r0, &(0x7f0000000700)=@orangefs={0x14, 0x1, {"9ca15a404a65650f109995282bb6817c", 0x3f}}, 0x111240)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40411}, 0x20000080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)=""/49, 0x31}], 0x1}, 0x20000060)
pipe2(&(0x7f0000000940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$binfmt_aout(r7, &(0x7f0000000980)={{0x107, 0x0, 0x81, 0x1a4, 0x254, 0x0, 0xf5, 0x2}, "6fa10f75c293b64968ae144534348500c2436b1ffd41e2bcd8bd9fd0fd707d946d17db2bf286cc46f9fead3f2d93522b7213b20c90359e5f125ab7c699a1df4d659bd2bf76f0fc9ea8caa34a1106df11a54781718a2db7d4d263345ad8a44a71bba828fb35a4e1f9e6522df44d5952afa81983198c96fe18ed93723f35d5a64ea5034ff86058b1f656ae857ec8785b51b110e2c238038dd255eb47721ece4e16481320e590f59ea604ac11f2b5136ec8d0838cbbb15fbf44aef48e9f415a172c53b58455d920b8c527311219b19b576ca677cfbf577961b00bfc0dfcd44b364d63345a3c4ac4", ['\x00']}, 0x206)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000bc0)={0x4, 0x6, 0x400, 0x0, 0x12})
r8 = dup(r2)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, r9, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
mknod(&(0x7f0000000dc0)='./file0\x00', 0x80, 0x3)
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0x100, r6, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x62}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0xcf, 0xc5, "b12ba54e25566c0c2a37fdafb0f29fc89ca3a29151cd32a1d6825ac66d7665f22b87681bd9f093069977e1035293fea96d27c26c24af3bf998a551d50ab4a85132bff2ad4b6b15dcdc8cd02ef1266f3a516522cfff0b8da6edac3811adfa8c9a42cac0724eda63a2f8259be5844ce19806dc9d311c80f50a574079e1c0cc561e85fa821845375ccf13ee4b6ad6dd2b0b8b8fd1e00df39118352695ae275d25e24099f11a0eaed4ef649aa8d40911137fabff2253106e9881b42194e7b3b1d2439bd08e7e1466c0a37b68a6"}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

[  143.547187] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'.
10:54:14 executing program 2:
mknod$loop(&(0x7f0000000880)='./file0\x00', 0x6000, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000740)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='trusted.overlay.nlink\x00'], &(0x7f0000000400)=[&(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)='-&]\xff@\'\x00', &(0x7f0000000200)='.(--)@*\x00', &(0x7f0000000240)=']\\!-(\x00', &(0x7f0000000280)='!\xd7$\x00', &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)=').\'(*\x00', &(0x7f00000003c0)='trusted.overlay.nlink\x00'])
r0 = epoll_create(0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20002006})
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)={0x11})
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
lremovexattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@known='trusted.overlay.upper\x00')

10:54:14 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '/\x00'})
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f00000018c0)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000001780)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000140)=""/130, 0x82}, {0xffffffffffffffff}], 0x3, &(0x7f0000000240)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000012c0)=""/46, 0x2e}, 0x9}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001300)=""/9, 0x9}], 0x1}, 0x4fc}, {{&(0x7f0000001380)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001400)=""/21, 0x15}], 0x1, &(0x7f0000001480)}, 0x3f}, {{&(0x7f00000014c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001540)=""/30, 0x1e}, {&(0x7f0000001580)=""/150, 0x96}, {&(0x7f0000001640)=""/31, 0x1f}], 0x3, &(0x7f00000016c0)=""/157, 0x9d}, 0x410}], 0x5, 0x42, &(0x7f0000001900)={r1, r2+10000000})
futex(&(0x7f0000001940)=0x2, 0xc, 0x2, &(0x7f0000001980)={0x0, 0x3938700}, &(0x7f00000019c0)=0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001a00)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {<r4=>0xee00, 0xee01}}, './file0\x00'})
r5 = getegid()
fchown(r0, r4, r5)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001a40), 0x100, 0x0)
ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000001a80))
futex(&(0x7f0000001ac0), 0xd, 0x0, &(0x7f0000001b00), &(0x7f0000001b40)=0x1, 0x1)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000001b80), 0x8)
epoll_pwait2(r3, &(0x7f0000001bc0)=[{}, {}], 0x2, &(0x7f0000001c00), &(0x7f0000001c40)={[0xfff]}, 0x8)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611)
openat$nvram(0xffffffffffffff9c, &(0x7f0000001cc0), 0x40000, 0x0)

10:54:14 executing program 3:
sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44011}, 0x80)
syz_io_uring_setup(0x3273, &(0x7f00000005c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0)

10:54:14 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clone3(&(0x7f00000003c0)={0x10000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x6}, &(0x7f0000000300)=""/70, 0x46, &(0x7f00000006c0)=""/4096, &(0x7f0000000380)=[r2, r2, r2, r2, r2], 0x5}, 0x58)
syz_open_procfs(r2, &(0x7f0000000080)='setgroups\x00')

10:54:14 executing program 0:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000))
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
setns(r0, 0x0)
fcntl$getflags(r0, 0x401)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, <r2=>0x0}})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={r2, "95f6c04c59ba89fade30da277727ca8e"})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = dup(r4)
ioctl$VT_DISALLOCATE(r5, 0x5608)
bind$inet(r5, &(0x7f00000014c0)={0x2, 0x4e21, @remote}, 0x10)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001600)=<r6=>0x0)
perf_event_open(&(0x7f0000001580)={0x4, 0x80, 0x9, 0x81, 0x7, 0x9a, 0x0, 0x9, 0x40004, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000001540), 0x2}, 0x109c1, 0x9, 0x7, 0x4, 0x401, 0x8, 0x1fc, 0x0, 0x7, 0x0, 0xffffffff80000000}, r6, 0xc, r5, 0x8)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000001640))
perf_event_open(&(0x7f0000001680)={0x5, 0x80, 0xa9, 0x0, 0x81, 0x2, 0x0, 0x312, 0x4002, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x177, 0x80}, 0x5420, 0xffffffffffff0906, 0x3ca, 0x9, 0x1000, 0x100, 0x3, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x3, r5, 0x9)
ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000001700)={0x8, 0x8, 0x1, 0x401, 0x6})
fcntl$setstatus(r4, 0x4, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x3c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44081}, 0x4004052)

10:54:23 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000001b00)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "2ddc20", 0x10, 0x3a, 0x0, @private2, @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000000)={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x1}}, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x1e, 0x2, 0x0, 0x0, "a09985509822f5235a988dbd89d0af35f570ca5930ed65369dbddde26d9d5d777cc443c1e25f4d813f435371e3323307716b830ca4b0f7d04901779c0c5b33bb"}}}}, &(0x7f0000000080)={0x1, 0x3, [0xc2d, 0x2a, 0xd73, 0xcd3]})

10:54:23 executing program 7:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0xdc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4c8}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}}}}]}, @CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x131001, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20010800}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0)
getdents64(r4, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20008088}, 0x8000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10, 0xffffffffffffffff, 0x21976000)
pivot_root(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file1\x00')
sendfile(r1, r4, &(0x7f0000000080)=0x1000, 0x1f00)
openat(r2, &(0x7f0000000400)='./file1\x00', 0x40, 0x40)
pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000)

10:54:23 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1010c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x10000027f)
r2 = clone3(&(0x7f0000000640)={0x123363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
clone3(&(0x7f00000003c0)={0x10000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x6}, &(0x7f0000000300)=""/70, 0x46, &(0x7f00000006c0)=""/4096, &(0x7f0000000380)=[r2, r2, r2, r2, r2], 0x5}, 0x58)
syz_open_procfs(r2, &(0x7f0000000080)='setgroups\x00')

10:54:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r2, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/14, 0xe}], 0x1)
sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x801, 0x70bd2a, 0x25dfdbfc, {0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x40)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3], 0x2c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000322", @ANYRES32=r5], 0x2c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r7], 0x2c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000003ba26053b7d8891b2988f381c13e742104e5a73b6a7d3e42f1de3c", @ANYRES32=r9, @ANYRESDEC=r3, @ANYRES64=r8], 0x20}}, 0x0)

10:54:24 executing program 6:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
pread64(r0, &(0x7f00000000c0)=""/98, 0x62, 0x7fff)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0xdc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4c8}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}}}}]}, @CTA_EXPECT_NAT={0x70, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4042, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x131001, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000100)=0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00000001060109000000000000000000000001050001000700000005000100070000000500010007000000650e0cbb0528d4b05003fc4f333b2091c9cb60abebf829f34bd2bd1ffe12f9ed2b9d61c4ef8c8ae8deac684e97c2603201c3b2e006ae141937343a9e5dc01c4afab8f764d2a8e80c952de73753b2ee24326a49dbec080bd945a8c4c1ba18b40bd07a016005bfd1fcaa4b7bf5a21b0551738577877a5b0a9367c82bcac5967cae2609441fca870aba7f774d8bd407fca11ff22fd6f6160167254df7886d035bed589f904b4a1f0746cafa15447a9d1cf66b51a7a5f87afb2e94f9f9f0c6d67ccd3bff01889e210df7c992fd73b56f215e6daae6ac07afca9199401fa3c04ca1dd524b1d66cd3efa351ab2f53867fd9535d280f01b6d9ad239299853339a82cfef00"], 0x2c}, 0x1, 0x0, 0x0, 0x20010800}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0)
getdents64(r4, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20008088}, 0x8000)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10, 0xffffffffffffffff, 0x21976000)
pivot_root(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file1\x00')
sendfile(r1, r4, &(0x7f0000000080)=0x1000, 0x1f00)
openat(r2, &(0x7f0000000400)='./file1\x00', 0x40, 0x40)
pwrite64(r2, &(0x7f0000000000)='y', 0xfffffe5f, 0x8040000)

10:54:24 executing program 0:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000))
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
setns(r0, 0x0)
fcntl$getflags(r0, 0x401)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, <r2=>0x0}})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={r2, "95f6c04c59ba89fade30da277727ca8e"})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = dup(r4)
ioctl$VT_DISALLOCATE(r5, 0x5608)
bind$inet(r5, &(0x7f00000014c0)={0x2, 0x4e21, @remote}, 0x10)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001600)=<r6=>0x0)
perf_event_open(&(0x7f0000001580)={0x4, 0x80, 0x9, 0x81, 0x7, 0x9a, 0x0, 0x9, 0x40004, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000001540), 0x2}, 0x109c1, 0x9, 0x7, 0x4, 0x401, 0x8, 0x1fc, 0x0, 0x7, 0x0, 0xffffffff80000000}, r6, 0xc, r5, 0x8)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000001640))
perf_event_open(&(0x7f0000001680)={0x5, 0x80, 0xa9, 0x0, 0x81, 0x2, 0x0, 0x312, 0x4002, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x177, 0x80}, 0x5420, 0xffffffffffff0906, 0x3ca, 0x9, 0x1000, 0x100, 0x3, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x3, r5, 0x9)
ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000001700)={0x8, 0x8, 0x1, 0x401, 0x6})
fcntl$setstatus(r4, 0x4, 0x0)

10:54:24 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0xa20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x72}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x9}}, './file0\x00'})
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3c1c4974376ec457}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x440, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4fb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c63}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffcc4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc6, 0x3, "b128114ea73b8867ce433e2218bcd6bba6847f38f173d7da717f26a5405bcabc50c2a094d7391799906c04fac6eaa46c74be190e1285bc62e9d893c1eb9c41f87d1073ffd82a97717116ed335fd58414e06b361cd6d2126244c419d86bf2fdac4655ad82511d7d53df101c816039d3599e293fe502a6418d4551647af59a144c0fc560f3e1dc8d31821c0af192c2cee0dad2756db01696649383bfb3ce9004283e8c3e9b885c38d42d247b7be8e4ee4e55186ffd79cd4628b2e7f01b623d5bce37ae"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a16d8efb9bc016d16b6712a4048928c7829623178b937f71fc9be9f82d648956cafa0f85"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "ac2d5a9a28cb6456b905b1fb7647ee2bd99e50e07ccb48103e3403f3f4be"}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62a7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe87d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8d0}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x440}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000)
open_by_handle_at(r0, &(0x7f0000000700)=@orangefs={0x14, 0x1, {"9ca15a404a65650f109995282bb6817c", 0x3f}}, 0x111240)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40411}, 0x20000080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)=""/49, 0x31}], 0x1}, 0x20000060)
pipe2(&(0x7f0000000940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$binfmt_aout(r6, &(0x7f0000000980)={{0x107, 0x0, 0x81, 0x1a4, 0x254, 0x0, 0xf5, 0x2}, "6fa10f75c293b64968ae144534348500c2436b1ffd41e2bcd8bd9fd0fd707d946d17db2bf286cc46f9fead3f2d93522b7213b20c90359e5f125ab7c699a1df4d659bd2bf76f0fc9ea8caa34a1106df11a54781718a2db7d4d263345ad8a44a71bba828fb35a4e1f9e6522df44d5952afa81983198c96fe18ed93723f35d5a64ea5034ff86058b1f656ae857ec8785b51b110e2c238038dd255eb47721ece4e16481320e590f59ea604ac11f2b5136ec8d0838cbbb15fbf44aef48e9f415a172c53b58455d920b8c527311219b19b576ca677cfbf577961b00bfc0dfcd44b364d63345a3c4ac4", ['\x00']}, 0x206)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000bc0)={0x4, 0x6, 0x400, 0x0, 0x12})
dup(r2)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8040)
mknod(&(0x7f0000000dc0)='./file0\x00', 0x80, 0x3)

10:54:24 executing program 1:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '/\x00'})
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f00000018c0)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000001780)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000000140)=""/130, 0x82}, {0xffffffffffffffff}], 0x3, &(0x7f0000000240)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000012c0)=""/46, 0x2e}, 0x9}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001300)=""/9, 0x9}], 0x1}, 0x4fc}, {{&(0x7f0000001380)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001400)=""/21, 0x15}], 0x1, &(0x7f0000001480)}, 0x3f}, {{&(0x7f00000014c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001540)=""/30, 0x1e}, {&(0x7f0000001580)=""/150, 0x96}, {&(0x7f0000001640)=""/31, 0x1f}], 0x3, &(0x7f00000016c0)=""/157, 0x9d}, 0x410}], 0x5, 0x42, &(0x7f0000001900)={r1, r2+10000000})
futex(&(0x7f0000001940)=0x2, 0xc, 0x2, &(0x7f0000001980)={0x0, 0x3938700}, &(0x7f00000019c0)=0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001a00)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {<r4=>0xee00, 0xee01}}, './file0\x00'})
r5 = getegid()
fchown(r0, r4, r5)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000001a40), 0x100, 0x0)
ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000001a80))
futex(&(0x7f0000001ac0), 0xd, 0x0, &(0x7f0000001b00), &(0x7f0000001b40)=0x1, 0x1)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000001b80), 0x8)
epoll_pwait2(r3, &(0x7f0000001bc0)=[{}, {}], 0x2, &(0x7f0000001c00), &(0x7f0000001c40)={[0xfff]}, 0x8)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001c80), 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611)

10:54:24 executing program 0:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000))
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
setns(r0, 0x0)
fcntl$getflags(r0, 0x401)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, <r2=>0x0}})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={r2, "95f6c04c59ba89fade30da277727ca8e"})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = dup(r4)
ioctl$VT_DISALLOCATE(r5, 0x5608)
bind$inet(r5, &(0x7f00000014c0)={0x2, 0x4e21, @remote}, 0x10)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001600)=<r6=>0x0)
perf_event_open(&(0x7f0000001580)={0x4, 0x80, 0x9, 0x81, 0x7, 0x9a, 0x0, 0x9, 0x40004, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000001540), 0x2}, 0x109c1, 0x9, 0x7, 0x4, 0x401, 0x8, 0x1fc, 0x0, 0x7, 0x0, 0xffffffff80000000}, r6, 0xc, r5, 0x8)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000001640))
perf_event_open(&(0x7f0000001680)={0x5, 0x80, 0xa9, 0x0, 0x81, 0x2, 0x0, 0x312, 0x4002, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x177, 0x80}, 0x5420, 0xffffffffffff0906, 0x3ca, 0x9, 0x1000, 0x100, 0x3, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x3, r5, 0x9)
ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000001700)={0x8, 0x8, 0x1, 0x401, 0x6})

10:54:24 executing program 0:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000))
fcntl$getownex(r0, 0x10, &(0x7f0000000040))
setns(r0, 0x0)
fcntl$getflags(r0, 0x401)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, <r2=>0x0}})
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000004c0)={r2, "95f6c04c59ba89fade30da277727ca8e"})
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = dup(r4)
ioctl$VT_DISALLOCATE(r5, 0x5608)
bind$inet(r5, &(0x7f00000014c0)={0x2, 0x4e21, @remote}, 0x10)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000001600)=<r6=>0x0)
perf_event_open(&(0x7f0000001580)={0x4, 0x80, 0x9, 0x81, 0x7, 0x9a, 0x0, 0x9, 0x40004, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000001540), 0x2}, 0x109c1, 0x9, 0x7, 0x4, 0x401, 0x8, 0x1fc, 0x0, 0x7, 0x0, 0xffffffff80000000}, r6, 0xc, r5, 0x8)
ioctl$FIONREAD(r3, 0x541b, &(0x7f0000001640))
ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000001700)={0x8, 0x8, 0x1, 0x401, 0x6})

10:54:24 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0xa20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x72}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r0, {0x9}}, './file0\x00'})
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x3c1c4974376ec457}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x440, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4fb3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c63}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffcc4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc6, 0x3, "b128114ea73b8867ce433e2218bcd6bba6847f38f173d7da717f26a5405bcabc50c2a094d7391799906c04fac6eaa46c74be190e1285bc62e9d893c1eb9c41f87d1073ffd82a97717116ed335fd58414e06b361cd6d2126244c419d86bf2fdac4655ad82511d7d53df101c816039d3599e293fe502a6418d4551647af59a144c0fc560f3e1dc8d31821c0af192c2cee0dad2756db01696649383bfb3ce9004283e8c3e9b885c38d42d247b7be8e4ee4e55186ffd79cd4628b2e7f01b623d5bce37ae"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a16d8efb9bc016d16b6712a4048928c7829623178b937f71fc9be9f82d648956cafa0f85"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "ac2d5a9a28cb6456b905b1fb7647ee2bd99e50e07ccb48103e3403f3f4be"}}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xf4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62a7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc51}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfdec}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe87d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8d0}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x440}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4000)
open_by_handle_at(r0, &(0x7f0000000700)=@orangefs={0x14, 0x1, {"9ca15a404a65650f109995282bb6817c", 0x3f}}, 0x111240)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40411}, 0x20000080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)=""/49, 0x31}], 0x1}, 0x20000060)
pipe2(&(0x7f0000000940)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$binfmt_aout(r6, &(0x7f0000000980)={{0x107, 0x0, 0x81, 0x1a4, 0x254, 0x0, 0xf5, 0x2}, "6fa10f75c293b64968ae144534348500c2436b1ffd41e2bcd8bd9fd0fd707d946d17db2bf286cc46f9fead3f2d93522b7213b20c90359e5f125ab7c699a1df4d659bd2bf76f0fc9ea8caa34a1106df11a54781718a2db7d4d263345ad8a44a71bba828fb35a4e1f9e6522df44d5952afa81983198c96fe18ed93723f35d5a64ea5034ff86058b1f656ae857ec8785b51b110e2c238038dd255eb47721ece4e16481320e590f59ea604ac11f2b5136ec8d0838cbbb15fbf44aef48e9f415a172c53b58455d920b8c527311219b19b576ca677cfbf577961b00bfc0dfcd44b364d63345a3c4ac4", ['\x00']}, 0x206)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000bc0)={0x4, 0x6, 0x400, 0x0, 0x12})
dup(r2)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c80), r4)
sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x4c, r7, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8040)


VM DIAGNOSIS:
10:54:14  Registers:
info registers vcpu 0
RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822b17e1 RDI=ffffffff87645be0 RBP=ffffffff87645ba0 RSP=ffff888041f9f698
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=000000000000000a R13=ffffffff87645ba0 R14=0000000000000010 R15=ffffffff822b17d0
RIP=ffffffff822b1839 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fa52e66f700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7204819368 CR3=000000001767e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM01=0000000000000000 0000000000000000 2525252525252525 2525252525252525
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff888041fd3580
RSI=ffffffff81726edd RDI=0000000000000007 RBP=ffffea0000f619c0 RSP=ffff8880420275a0
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=0000000000000000 R13=ffff88800daae010 R14=dffffc0000000000 R15=00000000000001fe
RIP=ffffffff81460af0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9fa68804d0 CR3=000000003d7d2000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff
YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000